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Preface 


Cloud computing is fast emerging as a new consumption and delivery model for 
IT solutions. Two distinct cloud patterns have evolved. Private clouds are custom 
cloud applications that are on premise to companies. Public clouds are owned 
and managed by a service provider and are delivered on a pay-per-use basis. 
Although the debate between the use of private versus public cloud continues, 
the industry is moving ever faster toward a hybrid solution. Hybrid clouds 
address the integration of traditional IT environments with one or more clouds, 
private and public. 

IBM® WebSphere® Cast Iron® along with the IBM Tivoli® Service Management 
Extensions for Hybrid Cloud supports the integration of private and public 
clouds.The Service Management Extensions for Hybrid Cloud supports the 
following scenarios: 

► Provisioning hybrid cloud resources 

► Monitoring hybrid cloud resources 

► Governing and managing workloads that use hybrid cloud resources 

► Provisioning users from LDAP to IBM LotusLive™ 

This IBM Redbooks® publication is intended for application integrators, 
integration designers, and administrators evaluating or using IBM WebSphere 
Cast Iron. In addition, executives, business leaders, and architects who are 
looking for a way to integrate cloud applications with their on-premise 
applications are shown how WebSphere Cast Iron can help to resolve their 
integration challenges. The book helps you gain an understanding of hybrid 
cloud use cases, and explains how to integrate cloud and on-premise 
applications quickly and simply. 
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Part 1 


Introduction 


In this part we introduce the concept of hybrid clouds and the challenges to cloud 
adoption. We provide an overview of IBM WebSphere Cast Iron, and discuss 
how this product can play a key role in the integration of applications across 
public and private clouds. 

This part also introduces a scenario that is used in Part 2, “Usage scenarios” on 
page 59 to illustrate the management capabilities available when using 
WebSphere Cast Iron as an integration solution. 

The following chapters are included: 

► Chapter 1 , “Overview of hybrid clouds” on page 3 

► Chapter 2, “Integrating cloud solutions with Cast Iron” on page 15 

► Chapter 3, “IBM Cloud Service Management Platform” on page 41 
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1 


Overview of hybrid clouds 


In this chapter we provide an overview of hybrid clouds and their usage.The 
benefits for enterprises to implement cloud capabilities have been well 
documented: cost savings, enhanced productivity, and rapid deployment of new 
functionalities, to name a few. 

Enterprises can use private clouds to scale requirements from lines of 
businesses quickly and in a cost-effective manner. The alternative to private 
clouds is the use of public clouds that are managed and delivered by service 
providers. Both cloud solutions have their advantages and challenges. 

Adopting a cloud solution is not simply a smart thing for a business, but is 
becoming a necessity because that is where the marketplace is moving. 

Cloud services are essentially delivered in three layers: 

► Software as a Service (SaaS Applications): Use of applications provided and 
supported by vendors over the network 

► Platform as a Service (PaaS): Use of vendor-managed and supported 
platforms to deploy custom or packaged cloud applications 

► Infrastructure as a Service (laaS): Use of basic infrastructure capabilities 
such as storage, network, CPU, and memory that is managed and supported 
by a vendor 

The cloud concept allows businesses to quickly scale IT capabilities to meet a 
potential opportunity. The ease and speed of delivery is especially appealing to 
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large enterprises, where a centralized IT department usually takes 
disproportionate amounts of time to put together a solution. 

Thus, many enterprises find themselves in the situation of having some form of 
both private and public clouds within their overall solution. In this chapter, we 
provide an overview of hybrid clouds and their usage. 

In this chapter we discuss the following topics: 

► Integration challenges to cloud adoption 

► What is hybrid cloud 

► IBM hybrid cloud solutions 

► Hybrid cloud dimensions 

► Hybrid cloud scenarios 
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1 .1 Integration challenges to cloud adoption 

One of the basic challenges for cloud adoption has been the struggle to integrate 
between the layers of cloud services and the enterprise. The following issues are 
some of the major aspects of the integration in a cloud landscape. 

► Control issues: 

- Lack of centralized control over resources owned and allocated, including 
applying centralized security standards across private and public domains 

- Lack of a seamless solution to policy based allocation and 
decommissioning of resources 

- Creation of custom (SaaS) applications in silos that results in: 

• No “big picture” of the enterprise 

• Component reusability opportunities lost 

• Lack of a standardized architecture across the enterprise 

► Standards and compliance issues that include: 

- Safeguarding confidential data 

- Federal standards and privacy law compliance 

► Application issues that include: 

- Lack of a comprehensive data synchronization solution 

- Application management issues with version control, upgrades, and 
deploying new functionality 

In summary, to fully exploit advantages of the cloud, enterprises must be able to: 

► Integrate solutions across private and public cloud domains to scale up or 
scale down. 

► Integrate on-premise and off-premise applications. 

► Monitor and manage resources in a standardized way across on-premise and 
off-premise resources. 

► Apply resource management governance policies in a consistent manner 
across on-premise and off-premise resources. 

Those needs can be met with a hybrid approach to cloud adoption. 
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1.2 What is hybrid cloud 


A hybrid solution bridges the gap between the on-premise existing systems and 
cloud applications, platform, and infrastructure, providing a rapid and 
easy-to-use method of setting up integrated solutions (Figure 1-1). 



Which demands integration? 


ntegration is critical in a nyoria wor 


Public Clouds 


Private Clouds 


Figure 1-1 Hybrid cloud 


The hybrid cloud theme addresses the integration of traditional IT environments 
with one or more clouds, on-premise and off-premise. The individual clouds and 
the traditional IT environments remain unique entities but are bound together by 
processes and technology. A fully comprehensive hybrid solution provides 
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integration capabilities at all three cloud services layers, as illustrated in 
Figure 1-2. 



By definition, a hybrid cloud solution provides: 

► Integration of traditional on-premise IT environments with one or more clouds, 
either on-premise (private) clouds or off-premise (public) clouds 

► Composition of two or more clouds that remain unique entities but are bound 
together by processes and technology to create a unique integrated 
environment, providing users a seamless experience across the individual 
clouds 
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1.3 IBM Hybrid Cloud solution 


Before we delve into the IBM Hybrid Cloud solution, we examine the IBM Cloud 
Computing Reference Architecture (CCRA). The CCRA (Figure 1-3) covers the 
entire spectrum of cloud services, including integration capabilities. 
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Figure 1-3 IBM Cloud Computing Reference Architecture (CCRA) 


The IBM Hybrid Cloud solution consolidates and simplifies the integration and 
management of on-premise and cloud computing resources. The IBM Hybrid 
Cloud solution includes: 

► WebSphere Cast Iron Software 

- This software enables companies to seamlessly integrate on-premise and 
public clouds. Enhancements to this platform include a complete 
multi-tenant cloud service that clients can use to design, run, and manage 
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all cloud integrations, and a new virtual appliance that can be installed on 
existing servers. 

► Service Management Extensions for Hybrid Cloud 

- This helps clients to monitor and secure the management of resources on 
both public and private clouds. With Tivoli software for the Hybrid Cloud 
solution, clients can now manage off-premise resources to the same 
standard, and with the same infrastructure, as resources inside enterprise 
walls. 

This Hybrid Cloud solution (Figure 1-4) provides visibility into off-premise clouds 
using the same user interface (Ul) as those on premise, and access to 
applications that are enabled across vendors. The result is increased client 
confidence in the management of off-premise resources. 


Integration of On-Premise 
Service Management and 
Applications... 



simplified, enabled, and 
controlled by Hybrid 
Cloud connectivity 



WebSphere Cast 
Iron Cloud Integration 








q 


T \ 

1 Service Management 
^ Extension Plug-in 


...for Cloud Service usage. 


SCE 



Amazon 

Web Services IKj= 


Figure 1-4 IBM Hybrid Cloud solution 
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The IBM Hybrid Cloud solution provides application integration capabilities, 
allowing clients to integrate application data from an off-premise service site into 
an on-premise application (Figure 1-5). As a result, clients can access public 
application data using the rapid integration capability of the WebSphere Cast Iron 
appliance. 



Figure 1-5 Application integration with the IBM Hybrid Cloud solution 


The IBM Hybrid Cloud solution provides monitoring capabilities that allow clients 
to begin monitoring off-premise resources using their existing on-premise 
monitoring installation (Figure 1-6). As a result clients gain visibility into their 
off-premise “cloud” infrastructure using the same ITM monitoring solution as 
those on premise. 



With the provisioning capabilities of the IBM Hybrid Cloud solution (Figure 1-7 on 
page 11), clients can provision off-premise resources using their existing 


10 Hybrid Cloud Integration and Monitoring with IBM WebSphere Cast Iron 


on-premise service automation installation. As a result, they extend service 
request automation into their off-premise cloud infrastructure using the same 
TSAM service automation management solution as those on premise. 



The governance capabilities of the Hybrid Cloud solution (Figure 1-8) allow an 
enterprise to use off-premise resources with its existing on-premise workload 
optimization installation. The result is an extension of the off-premise cloud 
infrastructure for workload optimization using the same Tivoli ITM, Omnibus, and 
TSAM solution as those on premise. 
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In the subsequent chapters, we describe in detail how the IBM WebSphere Cast 
Iron product along with the IBM Tivoli Service Management Extensions can 
provide a simplified yet comprehensive Hybrid Cloud solution. 


1.4 Hybrid cloud dimensions 

The hybrid cloud concept can be discussed within five broad dimensions. 

► Application Integration (services and data): This dimension is concerned with 
connecting and integrating on-premise applications with off-premise services 
and data for spill-over capacity, functionality, and business data mapping. 

► Security Integration: This dimension is concerned with integrating on-premise 
and off-premise identities, policies, and auditing systems. It includes ensuring 
proper security of off-premise cloud workload and securing management and 
payload interactions. 

► Monitoring and aggregation: This dimension is concerned with the integration 
of sensing and monitoring off-premise cloud-delivered services (including 
infrastructure, platform, and applications) with on-premise aggregation and 
management systems. This dimension is also concerned with enablement of 
on-premise sensing services such as monitoring, metering, and event 
infrastructure to extend their reach into off-premise cloud-based services. 

► Control and management: This dimension is concerned with controlling and 
managing access, availability, and enablement of service capacity in the 
off-premise cloud. 

► Workload governance: This dimension is concerned with governing service 
request management of on-premise and off-premise services and resources, 
including managing access permission to cloud services. 


1.5 Hybrid cloud scenarios 

Typically, a hybrid cloud is the combination of public and private clouds that 
interoperate, allowing clients to outsource selected information and processing to 
the public cloud while keeping private data in their control. On-premise private 
clouds store and secure private and confidential data behind the enterprise's 
firewall. Public cloud capabilities are enabled through the Internet, without the 
need to acquire and maintain additional hardware. 

There are also scenarios where public or private clouds are integrated with 
resources deployed and managed in traditional environments. A typical example 
is a hybrid web hosting scenario where the web server is in a public cloud and 
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the database server is in a private cloud or in a traditionally managed on-premise 

IT environment. 

Another hybrid cloud scenario consists of cloud applications running in a public 

cloud and cooperating with partner applications in private clouds of different 

enterprises, enabling, for example, cloud-based supply chain solutions. 

The following specific business scenarios fit a hybrid cloud solution: 

► A retail company plans to move an order processing application onto its new 
private cloud, but the sales team has used Salesforce.com for some time. 
CIOs want to understand their role in delivering, managing, securing, and 
providing business resilience for these new services and service delivery 
technologies. 

► A large finance company is thinking about building heterogeneous clouds, for 
example running Dev/Test x86 workloads on an open source hypervisor such 
as KVM, production x86 workloads on VMWare, and with ERP applications 
running on a Power-based system. The company wants the ability to manage 
and monitor these heterogeneous workloads in a single glass pane view. 

► A large telecommunication company anticipates extreme spikes in workload 
on several of their business services during a new model launch. They 
anticipate several hundred thousand clients to consume business services for 
advocation, but the volumes taper down soon after the launch. 

► A retail company based in the southeast region of United States acquires a 
retail chain servicing the west coast. The company is now challenged to spin 
off integration projects for consolidation, and requires additional short-term 
hardware and software resources. These resources are thrown away after the 
integration projects are complete. 

► The IT department of a retail company wants to dynamically define thresholds 
for determining workload overflow situations. The department wants a 
policy-based spillover capacity, by setting policies determining situations that 
qualify the use of an off-premise public cloud under qualified spillover 
situations. 

► The IT department mentioned in the preceding scenario also has workload 
processing that requires access to on-premise data. The data in the 
on-premise repositories includes both business-critical, sensitive data and 
non-critical, non-sensitive data. Business-critical data must remain on 
premise and cannot be replicated to or processed on off-premise resources. 
When workload is to be processed off-premise, only non-critical data is to be 
replicated and made available on the off-premise public cloud. 
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Integrating cloud solutions 
with Cast Iron 


IBM WebSphere Cast Iron Cloud Integration enables companies to integrate 
applications, regardless of whether the applications are located on premise or in 
public or private clouds. Now it also includes Service Management Extensions 
for Hybrid Cloud, which allows companies to integrate the monitoring, 
provisioning, events handling, and automating of service environments located 
both on and off premises. 

In this chapter we provide an overview of WebSphere Cast Iron, and the 
architectural overview of an integrated Hybrid Cloud solution and the usage 
scenarios through the Service Management Extensions for Hybrid Cloud. 

In this chapter we discuss the following topics: 

► An overview of IBM WebSphere Cast Iron 

► Examples of Cast Iron implementations 

► Architectural overview of the integrated solution 

► Installation of the Service Management Extensions for Hybrid Cloud 

► Usage scenarios 
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2.1 Overview of IBM WebSphere Cast Iron 


IBM WebSphere Cast Iron provides a solution that meets the challenge of 
integrating cloud applications with on-premise systems, cloud 
applications-to-cloud applications, and on-premise-to-on-premise applications, 
as illustrated in Figure 2-1. 



Figure 2- 1 IBM WebSphere Cast Iron 
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The IBM WebSphere Cast Iron environment focuses on business, user, and 
application requirements to remove the daunting complexity of integration. Cast 
Iron uses a configuration approach instead of a coding approach to reduce the 
time needed to integrate systems on the cloud. This ensures there is a quick win 
for the business. 

Cast Iron provides the following models of implementation: 

► An appliance model where the appliance can be either physical hardware or a 
virtual machine and where the Integration Appliance is installed on premise, 
behind the firewall 

► A SaaS model (Cast Iron Live) 

Each of the three form factors (physical, virtual, or Cast Iron Live) allows for 
cloud-to-cloud, cloud-to-on-premise, and on-premise to on-premise integration. 
Each form factor allows for real time, near real time, and batch integrations. 

The following section introduces the components of a Cast Iron implementation, 
differentiating between the on-premise Integration Appliance and the cloud 
model (Cast Iron Live). 


2.1.1 Appliance model 

An on-premise appliance normally resides behind the firewall and not within a 
DMZ. For the development, test, and production life cycles, the runtime 
environments are typically separated and each has its own Integration Appliance 
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that accesses the endpoints that are necessary for that environment. Figure 2-2 
outlines the approach for using an on-premise Integration Appliance. 



Figure 2-2 Architecture overview of the Cast Iron appliance model 


Integration projects contain orchestrations that provide the logic of the 
integration. The integration projects are created and deployed using Cast Iron 
Studio. The Cast Iron Community maintains a solutions repository of Template 
Integration Projects (TIPs), that can be used as is or can be customized to 
orchestrate common integration types. After deployment, you have full control of 
projects and their orchestrations on the appliance through a Web Management 
Console. 

The orchestrations are started through a mechanism that is defined by an activity 
in the orchestration. These activities include scheduling, polling, or waiting for an 
incoming request, such as an HTTP Receive Request. 

The Integration Appliance requires connectivity to the endpoints that are required 
by the orchestration. Data flows through the Integration Appliance and is stored 
internally as XML variables. The Integration Appliance allows you to control the 
logging for each orchestration. 
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The Service Management Extensions for Hybrid Cloud will only work with either 
the physical or virtual options of the Integration appliance. 


2.1.2 Cast Iron Live 

The multi-tenant Cast Iron Live service includes the following key components 

that allow you to design, run, and manage integration projects, all in the cloud: 

► A clustered runtime engine that runs the integration projects and that has 
built-in fault tolerance and recovery mechanisms 

► A multi-tenant highly available system to store the designed integration 
projects 

► A load balancer to intelligently manage the loads throughout the various 
runtime engines 

► Highly available file systems to store and manage logs that are related to the 
integrations 

The design environment, referred to in Cast Iron Live as Designer, provides the 

same design capabilities and user interface as Studio does for the on-premise 
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Integration Appliance. Figure 2-3 illustrates the architectural overview of the Cast 
Iron Live solution. 


Cloud Applications and 
Databases 
(Public/Private) 



WebSphere Cast Iron Live 


v: 


E 




Project development 
and unit test in Cast 
Iron Studio 




Secure Connector 
(Production) 


Web browser 
management of 
project deployment 
and Cast Iron Live 
environments 


i 



Figure 2-3 Overview of the architecture of the Cast Iron Live solution 


You can access the Cast Iron Live interface from a web browser by typing in the 
following address https : //cl oud2 . casti ron . com/1 ogi n 

First-time users can trial, for up to 60 days, the Cast Iron Live model through the 
following website https : //express . casti ron . com/express/# 


Attention: The Service Management Extensions for Hybrid Cloud will not 
work with the Cast Iron Live solution because it is a multi-tenant solution on 
the public cloud. 
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2.2 Examples of Cast Iron implementations 

The following example use cases illustrate where WebSphere Cast Iron provides 

a solution for integration: 

► Exposing ERP information to sales agents 

A company needed to make sales order information that was stored in 
multiple ERP systems available to sales agents who used a SaaS-based 
CRM system. Integrating the ERP information with the CRM system provides 
the agents visibility to the necessary information and avoids the agents 
having to sign on to multiple systems. The company had only a small IT 
department with no substantial development capability, so they need a tool 
that business analysts can use. 

The initial project involved using WebSphere Cast Iron to create three 
orchestrations that took less than two weeks to develop. The orchestrations 
provided real-time integration of the ERP information into the CRM system. 
Over time, the integration capabilities were expanded. There are now over 
150 orchestrations connecting a multitude of systems that are running both in 
batch and on request. 

► Integrating separate insurance policy systems 

An insurance company has multiple systems that are used to manage new 
business. Having one system that provides quotes for policies and another 
system that is used to administer policies occasionally resulted in duplicate 
data entry and as a result, generated error conditions. In addition, many of the 
workflows involved in bringing in new business are manual, and vendors must 
provide documents in multiple formats. 

The company used WebSphere Cast Iron to provide bidirectional integration 
between the two systems. Policy quote information is integrated into the 
administrative system and vice versa, making it necessary to enter data only 
one time and ensuring the integrity of the data in both systems. Integrating 
data through key business systems ensured that files were routed correctly 
and that workflow was not interrupted if a user is unavailable. Vendors must 
provide data only in one format, with the integration solution making the data 
available to the systems where it is needed in the proper format. Finally, the 
integration solution eliminates errors that were introduced because of 
duplicate data entry. 

► Synchronizing e-commerce systems and linking to the SaaS CRM application 
to provide a single view of customers 

A commercial enterprise had two e-commerce systems that are populated 
with customer and order data that is currently not synchronized. The 
enterprise also has a CRM application where customer data is kept, and a 
fulfillment system with inventory and product data. The enterprise used 
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WebSphere Cast Iron to integrate the data in these systems to provide a 
more cohesive view of customer data. 

The initial implementation included the following orchestrations that provided 
the initial population of data throughout the systems and the synchronization 
of information between systems: 

- Data providing a single view of the customer was populated into the SaaS 
CRM system from the enterprise’s existing systems using a web services 
integration. 

- An orchestration with a short polling interval pushes account, order, 
inventory, and product information to the single view from the e-commerce 
and fulfillment systems, ensuring that the customer service staff has the 
most current information. 

- A nightly refresh of all stock keeping units in the e-commerce system 
occurs based on information from the fulfillment system. The orchestration 
uses secure file transfer to perform the refresh. 

- Synchronization of customer records between the two e-commerce 
systems occurs on a regular basis, ensuring that when customers sign in 
to a system, their data is available to them. 


2.3 How WebSphere Cast Iron integrates applications 

WebSphere Cast Iron provides an approach to integrating applications that does 
not require any programming knowledge. You can build integration flows in 
WebSphere Cast Iron Studio, which is a graphical development environment that 
is installed to a personal computer (PC). 

With WebSphere Cast Iron Studio, you create an integration project that contains 
one or more orchestrations. Each orchestration is built with a number of activities 
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that define the flow of data. You can define the details of an activity from the 
configuration panes within WebSphere Cast Iron, as shown in Figure 2-4. 



Figure 2-4 Cast Iron Studio 

A project contains all of the assets that are required for the orchestrations to run, 
including any file schemas, WSDL files, and functions. The project also defines 
connectivity to the sources of data, the endpoints. Cast Iron contains many 
built-in connectors to applications (for example, SAP), databases, and web 
services that make connecting to these endpoints straightforward. 
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Cast Iron Studio provides easy-to-use tools for configuring properties and for 
mapping input data to output data. Cast Iron also provides Template Integration 
Projects (TIPs) that encapsulate a specific integration use case between specific 
endpoints and that include preferred practices. You can download these TIPs 
from the Cast Iron community and modify to fit your precise needs. Figure 2-5 
outlines the Cast Iron approach to creating orchestrations. 





Beyond Configuration 
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Configuration- Wizard Q 


Configuration 


1. Introduction 

2. Edit Login Information For SAP endpoint. 

3. Verify SAP connectivity 

4. Extract SAP Customer 

5. Complete SAP Connectivity 

6. Create Business Rules for data validation 

7. Verify Salesforce.com connectivity 

8. Map customer data 







Figure 2-5 Cast Iron approach 


Within Studio, there is a simulated runtime environment to enable unit testing of 
the orchestrations with visibility of all data at all points. After you test the project, 
you can publish the project to the run time, where you can then manage and 
monitor the project. A browser-based interface, the Web Management Console 
(WMC), provides the capability to manage all functions on the run time. 

As with any tool, there are preferred practices to implement designs. When 
processing large amounts of data, a poor design can mean that the integration 
takes an extraordinary amount of time or that it simply does not work. 

Each endpoint is different in its requirements, and any integration flow must use 
the characteristics of the endpoint to its best advantage, for example processing 
batches of data to optimize the speed of transactions. 
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2.4 Service Management Extensions for Hybrid Cloud 


The Service Management Extensions for Hybrid Cloud extends the on-premises 
suite of products through integration of public and private clouds, and intra-cloud 
environments that involve multiple distributed data centers and distributed 
workloads with the following functionalities: 

► Monitor cloud resources and on-premises resources in the same user 
interface 

► Provision cloud resources and on-premises resources in the same user 
interface 

► Govern where resources are used, on-premises or in the cloud 

► Ensure proper authorization to use services 

► Synchronize user directories so that on-premises users can access the cloud 

The Service Management Extensions for Hybrid Cloud delivers these 
functionalities on either the IBM WebSphere DataPower® Cast Iron Appliance 
XH40, which is a physical appliance, or the IBM WebSphere Cast Iron 
Hypervisor Edition, which is a virtual appliance. It does not run on the Cast Iron 
Live or Express editions. The physical and virtual Cast Iron Appliance is referred 
to as the “WebSphere Cast Iron Appliance.” 


2.4.1 Software components of the solution 

The software components of the Service Management Extensions for Hybrid 
Cloud solution are listed here: 

► The Provisioning Plug-in enables provisioning of resources into IBM 
SmartCloud™ Enterprise and Amazon Elastic Compute Cloud. 

► The Monitoring Plug-in enables monitoring of resources in the IBM 
SmartCloud Enterprise and Amazon Elastic Compute Cloud. 

► The Directory Synchronization Plug-in enables synchronizing enterprise 
LDAP user information with LotusLive user information. 


2.4.2 Prerequisites 

Table 2-1 on page 26 provides a breakdown of requirements for each usage 
scenario of the Service Management Extensions for Hybrid Cloud. 
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Table 2- 1 Prerequisite products for each scenario 


Product 

Version 

Provision 

resources 

Monitor 

resources 

Govern and 

manage 

workload 

Synchronize 

directories 

WebSphere 
DataPower 
Cast Iron XH40 
Appliance 

6.1. 0.3 

Y 

Y 

Y 

Y 

WebSphere 
Cast Iron 
Hypervisor 
Edition 

6.1. 0.3 

Y 

Y 

Y 

Y 

IBM LotusLive 





Y 

Tivoli 

Monitoring 

6.2.2 


Y 

Y 


Tivoli 

Monitoring 

Agent 

6.2.2 FixPack 2 


Y 

Y 


Tivoli 

NetCool/l impact 

5.1.1 FixPack 1 



Y 


Tivoli Service 

Automation 

Manager 

7.2.1 FixPack 4 

Y 


Y 


IBM 

WebSphere 
ILOG JRules 

7.1.1 



Y 



2.5 Usage scenarios 

Some of the most common scenarios where this hybrid solution is applicable are 
listed here and explained in the following sections: 

► New client 

► Clients with an existing WebSphere Cast Iron installation 

► Clients with Tivoli Monitoring 

► Clients with Tivoli Service Automation Manager 

► Clients with LDAP 
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2.5.1 New client scenario 

In the “new client” scenario, a customer wants to extend its network to leverage 

the provisioning, monitoring, or both, of public clouds. An IBM WebSphere 

DataPower Cast Iron Appliance XH40 or WebSphere Cast Iron Hypervisor 

Edition is not deployed and Service Management Extensions for Hybrid Cloud 

prerequisite software is not installed. 

The solution consists of the following tasks: 

1 . Install and configure the Tivoli Service Delivery Manager software. 

2. Deploy the IBM WebSphere DataPower Cast Iron Appliance XH40 or 
WebSphere Cast Iron Hypervisor Edition. 

3. Install the Service Management Extensions for Hybrid Cloud product 
software. 

4. Contact Amazon Web Services (AWS) and or IBM Smart Cloud Enterprise 
services to request a user account. 

5. Configure each hybrid service. Part 2, “Usage scenarios” on page 59 explains 
the details of each usage scenario. 


2.6 Clients with a WebSphere Cast Iron setup scenario 

In this scenario, a client has deployed IBM WebSphere DataPower Cast Iron 
Appliance XH40 or WebSphere Cast Iron Hypervisor Edition, but Service 
Management Extensions for Hybrid Cloud prerequisite software is not installed. 
The customer wants to provision and monitor resources on public clouds. 

The solution consists of the following tasks: 

1 . Upgrade to Cast Iron firmware version 6.1 .0.3. 

2. Install and configure the Tivoli Service Delivery Manager software. 

3. Install the Service Management Extensions for Hybrid Cloud product 
software. 

4. Contact Amazon Web Services (AWS) and or IBM Smart Cloud Enterprise 
services to request a user account. 

5. Configure each hybrid service. 


Chapter 2. Integrating cloud solutions with Cast Iron 27 



2.6.1 Clients with a Tivoli Monitoring setup scenario 

In this scenario, a customer has deployed Tivoli Monitoring and wants to extend 

their Tivoli Monitoring and add provisioning capabilities into public clouds. 

The solution consists of the following tasks: 

1 . Upgrade to Tivoli Monitoring version 6.2.2 or later. 

2. Install and configure the Tivoli Service Automation Manager. 

3. Install the Service Management Extensions for Hybrid Cloud product 
software. 

4. Contact Amazon Web Services (AWS) and or IBM Smart Cloud Enterprise 
services to request a user account. 

5. Configure each hybrid service. 

2.7 Clients with a Tivoli Service Automation Manager 
setup scenario 

In this scenario, a customer has deployed Tivoli Service Automation Manager 

and wants to leverage all of Service Management Extensions for Hybrid Cloud 

capabilities. 

The solution consists of the following tasks: 

1 . If the current version of Tivoli Service Automation Manager is Version 7.2.0 or 
earlier, upgrade to Version 7.2.1 . 

2. Install and configure Tivoli Monitoring, WebSphere ILOG JRules, and Tivoli 
Netcool/I mpact. 

3. Deploy IBM WebSphere DataPower Cast Iron Appliance XH40 or 
WebSphere Cast Iron Hypervisor Edition. 

4. Install the Service Management Extensions for Hybrid Cloud product 
software. 

5. Install the monitoring, provisioning, and LotusLive Service Management 
Extensions for Hybrid Cloud plug-ins. 

6. Contact Amazon Web Services (AWS) and or IBM Smart Cloud Enterprise 
services and Lotus Live services to request a user account. 

7. Configure each hybrid service. 
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2.7.1 Clients with a LDAP v3-compliant Directory Server scenario 


In this scenario, a customer has deployed an LDAP v3 compliant directory server 
and wants to manage LotusLive accounts. 

The solution consists of the following tasks: 

1 . Deploy IBM WebSphere DataPower Cast Iron Appliance XH40 or WebSphere 
Cast Iron Hypervisor Edition. 

The IBM WebSphere DataPower Cast Iron Appliance XH40 or WebSphere 
Cast Iron Hypervisor Edition includes the required version of Tivoli Directory 
Integrator preinstalled. 

2. Contact LotusLive services to request a user account. 

3. Install and configure the LotusLive Service Management Extensions for 
Hybrid Cloud plug-ins, which also installs the required Tivoli Directory 
Integrator run-time engine. 

A Tivoli Directory Integrator Server in a customer site, if available, is not affected. 


2.8 Installing the Service Management Extensions for 
Hybrid Cloud 

The prerequisite tasks to be completed prior to installing the Service 
Management Extensions for Hybrid Cloud are listed here: 

► Create a public cloud account at one of the following public cloud providers. 

- IBM Smart Cloud Enterprise 

- Amazon Elastic Compute Cloud (Amazon EC2 

- Lotus Live (only for Directory Synchronization) 

► Set up the WebSphere Cast Iron system (only the physical or virtual 
appliances are compatible). 

► Install the prerequisite software based on your usage scenario. 

- Tivoli Service Automation Manager 

- Tivoli Monitoring 

- Tivoli NetCool/Impact 

- WebSphere ILOG JRules 

The next step is to download the Extensions from the following website: 

https : //www-304 . i bm.com/software/brandcatal og/i sml i brary/detai 1 s?catal og . 1 abel = 
1TW10TS0D 
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2.8.1 Installing the extensions through the Cast Iron design console 


This process assumes that you have a virtual appliance up and running. 

1 . Log on to the WebSphere Cast Iron Design Console at 

http:/ /hostname /express (replace the histamine with the IP address of your 
device) with the admin user account and relevant password (Figure 2-6). 


WebSphere. 


software 



WebSphere Cast Iron Design 
Console 



Licensed Materials - Property of IBM Corp. Copyright by IBM Corp, and other(s) 2001, 201 1. 

— — IBM, the IBM logo, and WebSphere are trademarks of International Business Machines 
r Z1TZ Corporation, registered in manyjurisdictions worldwide. Java and all Java-based marks and logos 
— <& are trademarks or registered trademarks of Oracle and/or its affiliates. Other product or service 
names may be trademarks of IBM or other companies. 


Figure 2-6 WebSphere Cast Iron Design Console logon through web browser 
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2. After you successfully log in to the Design Console, install the plug-ins from 
the extracted files that were originally downloaded from the Service 
Management Extensions site, as shown in Figure 2-7. 



Figure 2-7 Click the “Install New Bundle” button to start the installation 

After the extensions are successfully installed, a window similar to that shown 
in Figure 2-8 is displayed. 


H Browse. | | Install New Bundle | 


Bundle Name 

Version 

^ Vendor 

Licence 

Install Date 

Provisioning Piugin 

7.2.1 .0 

ibm 

□ 

2012-02-23 23:21:16 

Tivoii Directory integrator 
Piugin 

7.2.1. 0 

ibm 

□ 

2012-02-23 23:42:45 

Monitoring 

7.2.1. 0 

ibm 

□ 

2012-02-23 23:23:20 


Figure 2-8 All three extensions have been installed and running successfully 


Chapter 2. Integrating cloud solutions with Cast Iron 31 



3. Create the integration between the respective plug-ins and your service 
environment, as shown in Figure 2-9. 



Figure 2-9 Creating the integration between the plug-ins and your service 
environment 


Creating the integration between the source and target through the plug-ins is 
discussed in more detail in Part 2, “Usage scenarios” on page 59. 


2.9 Example scenario 

This section provides a high-level look at an example scenario illustrating where 
and when this solution can be used. This scenario is explored in more detail in 
Part 2, “Usage scenarios” on page 59. 

The scenario is based on a fictional, large transnational retail company called 
IBM Redbooks Store with 1000 stores. This company acquires another retail 
company with 100 stores to add to their portfolio of products. 


2.9.1 Provisioning 

After the acquisition, the company realized it needed an integrated inventory 
management system so that all 1100 stores could sell the complete product line. 
To ensure that the new line of products is sold at all 1100 stores, the company 
had an immediate need to set up an integration and test environment to support 
the new integrated inventory management system. 

The company leveraged a Hybrid Cloud model to obtain the additional capacity 
needed for the brief period of time during which they will work on integration and 
test, as they expanded their capacity of their on-premise cloud resources to host 
the production workload. 
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As illustrated in Figure 2-10, the company will be able to utilize its existing Tivoli 
Service Automation Manager system to create the new testing environment on 
the cloud through the Provisioning Bundle installed on its WebSphere Cast Iron 
appliance. 



The end result is an enabled federated service catalog as shown in Figure 2-1 1 
on page 34. This federated catalog will help the administrator to create, manage 
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and tear down server resources on the cloud using the same Tivoli Service 
Automation Manager that is currently used internally. 



Figure 2-11 Federated service catalog 

Chapter 5, “Provisioning scenario” on page 93, provides detailed information 
about this solution, and explains the installation and configuration steps. 
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2.9.2 Monitoring 


During performance testing on its new inventory management system, the 
company became aware that the new product line is a seasonal product. That is, 
although the product line is sold throughout the year, it sells most heavily during 
October, November, and December. 

When the company ran its performance tests with simulated data for a year, it 
realized that it will need additional CPU capacity in October, November, and 
December. 

Due to this cyclical period of overload, the company had to utilize the public cloud 
providers. As a result, it used its Tivoli Monitoring system to monitor both its 
on-premise data center and its off-premise systems residing on the cloud, as 
shown in Figure 2-12. 


"On-Premise" Data Center 




n 



g 

m. 

]_ 

- 

- 

1 1 

i=i - 

% 


I 

n 


Tivoli Monitoring 


Hybrid Cloud Integration 


WebSphere Cast 
Iron Cloud Integration 


Monitoring Bundle 


Public Cloud - 

Infrastructure and Applications 


Amazon 


Figure 2- 12 Overview of the Monitoring integration 
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Figure 2-13 shows the end result when viewed through Tivoli Monitoring. The 
new unified workload monitoring capability ensures that the IT team will be able 
to monitor both data centers through one interface, and it enables them to 
increase the system resources on demand. 



Figure 2-13 Unified Workload Monitoring through Tivoli Monitoring and Cast Iron 


Chapter 4, “Monitoring scenario” on page 61 , explains the installation and 
configuration steps involved in getting this system up and running. 
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2.9.3 Directory Synchronization 


In addition to the larger inventory in October, November and December, the 
company hires additional staff during these months. This requires the 
provisioning of additional users in the company’s internal LDAP directory. 

IBM Redbooks Store uses Lotus Live (https ://www.lotusl ive.com/en/) as the 
email system for the temporary staff every year, and it needs to synchronize its 
internal LDAP directory with the temporary staff users in LotusLive. 

This is achieved using the Directory Synchronization bundle installed on the 
company’s existing Cast Iron appliance, and integrating it to the Lotus Live 
system on the cloud as shown in Figure 2-14. 
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Figure 2-14 Overview of the Directory Synchronization integration 


Chapter 6, “Directory Synchronization scenario” on page 153, explains the steps 
needed to get the solution up and running. 
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2.9.4 Workload Governance and Management 


When IBM Redbooks Store implements the new inventory management system 
that supports all 1100 stores, the company will use a Hybrid Cloud that supports 
the entire workload during most quarters with on-premise resources, and then 
leverage public resources during the heaviest months. 

In addition, the company will save additional money by decommisioning users 
and compute resources after the holiday business season ends and business 
returns to normal volumes. 

Figure 2-15 gives an overview of the policy-based system that enables the 
business to create system resources based on business rules. 


"On-Premise" Data Center 




L 


1_I 



— 

— 

Ls 




1 

Tivoli Service 
Automation Manager 


Tivoli Monitoring 


Omnibus/Netcool 


ILOG 


Hybrid Cloud Integration 


WebSphere Cast 
Iron Cloud Integration 


Provisioning Bundle 


Monitoring Bundle 


Public Cloud - 

Infrastructure and Applications 


Amazon 


Figure 2-15 Workload Governance and Management overview 


This solution provides the business with the following capabilities: 

► To create, manage, and tear down server resources based on business 
policies 

► To optimize resource allocation based on workload 
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The WebSphere ILOG Rules engine is used to define the workload placement, 
as shown in Figure 2-16. 



Figure 2-16 Using the WebSphere ILOG Rules engine for workload placement 

The rule flow determines which cloud to place the workload on. For example, in 
Figure 2-16 the “Try to place Workload on IBM Compute Cloud” task determines 
whether the workload should be placed on the IBM cloud with the following rule: 

PMRDPCLCPR WORKLOADTYPE of the Service Request contains “Linux 
OS for TEST” 

THEN 

set the PMRDPCLCPR PLACEMENT of the Service Request to IBM SCE’; 

Chapter 7, “Workload Governance and Management scenario” on page 173, 
explains the steps needed to get this solution up and running. 
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2.10 Summary 

The IBM Service Management Extensions for Hybrid Cloud provides the 
following features: 

► Monitoring Integration with IBM Tivoli Manager (ITM) 

An integrated monitoring dashboard creates a single view for monitoring 
on-premise and off-premise resources. 

► Provisioning and governance integration with Tivoli Service Automation 
Manager (TSAM) 

This feature provides the ability to request and provision IBM Smart Cloud 
Enterprise and Amazon hybrid resources through TSAM’s graphical user 
interface. 

► User Directory Integration for Lotus Live with Tivoli Directory Integrator 

Automated user account management is possible between enterprise and 
Lotus Live. 

► Workload Governance and Management 

You can set resource overflow and underutilization thresholds on Event 
Correlation Service on Impact, TSAM rules on ILOG Business Rules and 
TSAM escalations and actions. 

Workload resources can be automatically balanced based on the dynamics of 
the system load. 
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IBM Cloud Service 
Management Platform 


In this chapter we provide an overview of the IBM Cloud Service Management 
Platform (CCMP), which provides both business and operational support 
services to service consumer and development portals. This common Cloud 
Service Management Platform enables both cloud service consumers and cloud 
service creators to use a robust platform to consume or create cloud services. In 
addition, we discuss how the roles of cloud service consumer, cloud service 
provider, and cloud service creator interact and benefit from a common cloud 
service management platform. 

Next, we discuss how the Cloud Service Management Platform applies and 
supports hybrid cloud environments. Finally, we cover how the Service 
Management Extensions help support and extend the Cloud Service 
Management Platform. 

In this chapter we discuss the following topics: 

► Cloud computing architecture 

► Mapping IBM products to the CCMP 

► Solutions supporting the Business Support Services (BSS) 

► Solutions supporting the Operational Support Services (OSS) 

► Cloud Service Management Platform for Hybrid Cloud 
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3.1 Cloud computing architecture 


The IBM Cloud Reference Architecture (Figure 3-1) is designed to provide 
guidance for cloud computing and provide a blueprint for effective security, 
resiliency, service management, governance, business planning and lifecycle 
management. These components of the cloud reference architecture enable an 
enterprise to control the cloud environment most effectively, optimize 
productivity, reduce associated labor costs and ensure a safe environment for 
business users. 
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Figure 3- 1 Cloud Reference Architecture 


3.1 .1 Key roles in a cloud ecosystem 

There are three key roles that support a cloud ecosystem. 
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First, the cloud service consumer role represents an organization, a human 
being, or an IT system that consumes service instances delivered by a particular 
cloud service. The service consumer might be billed for its interactions with cloud 
services and the provisioned service instances. A service consumer can also be 
viewed as a kind of super-role representing the party consuming services. The 
cloud service consumer browses the service offering catalog and triggers the 
provisioning and management of cloud services. 

Next, the cloud service provider role has the responsibility of providing cloud 
services to cloud service consumers. A cloud service provider is defined by the 
ownership of a Common Cloud Management Platform (CCMP). This ownership 
can either can be realized by truly running a CCMP by the provider itself, or 
consuming one as a service. A person acting in the role of a cloud service 
provider and a cloud service consumer at the same time is a partner of another 
cloud service provider who is reselling cloud services or consuming cloud 
services and adding value add functionality on top, which in turn is provided as a 
cloud service. 

Finally, the cloud service creator role is responsible for creating a cloud service, 
which can be run by a cloud service provider and exposed to cloud service 
consumers. Typically, cloud service creators build their cloud services by 
leveraging functionality which is exposed by a cloud service provider. 
Management functionality, which is commonly needed by cloud service creators, 
is defined by the CCMP architecture. A cloud service creator designs, 
implements, and maintains runtime and management artifacts specific to a cloud 
service. Just as with the cloud service consumer and the cloud service provider, 
the cloud service creator can be an organization or a human being. 

Typically, the operations staff is responsible for operating a cloud service and will 
be closely integrated with the development organization that is developing the 
service. 


3.1.2 Common Cloud Management Platform 

The Common Cloud Management Platform (CCMP) leverages four key design 
principles to provide a complete service management solution for cloud services. 

First, the CCMP supports the ability to design cloud services for scale. This is 
known as the “Efficiency Principle” and has the primary objective of driving down 
costs and time to response by orders of magnitude by leveraging cloud 
characteristics such as elasticity, self-service access, and flexible sourcing. 

The second principle is known as the “Lightweight Principle” and supports lean 
and lightweight service management policies, processes, and procedures. This 
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principle allows for standardization in cloud environments to reduce 
management costs. 

The next design principle that the CCMP leverages is the “Economies-of-Scale” 
principle, which maximizes the sharing of management, infrastructure, and 
platform components across cloud services. This sharing of components allows 
for a reduction in costs and time to market. 

Finally, the CCMP leverages the “Genericity Principle” which allows for service 
templates to manage service instances generically along their lifecycle. This 
generic design of components allows for a single management platform. 

These four key design principles are leveraged to create the Operational and 
Business support services that make up the Common Cloud Management 
Platform. 
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Operational Support Services 

The Operational Support Services (OSS) module (Figure 3-2) defines the set of 
systems management services that may be used by cloud service developers. 



Figure 3-2 OSS architecture 

Many of the management domains specified in the OSS can also be 
encountered in traditionally managed data centers such as monitoring and event 
management, provisioning, and incident and problem management. Although 
these management domains are conceptually the same in both traditional and 
cloud IT environments, in a cloud architecture these domains can be 
implemented in different ways. 

Take, for example, incident and problem management. If a physical server fails 
in a traditional IT environment, a trouble ticket is opened and assigned to a 
systems administrator for manual intervention and resolution. If the problem is 
not resolved in the time specified by service level agreements (SLAs), it may be 
escalated until it is resolved. 
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However, if a physical server fails in a cloud environment, a new virtual machine 
or application is automatically brought up on another physical server where 
resources are available, without delay. This approach is typically referred to as 
“replace versus repair,” based on the assumption that manually repairing things 
is often more complex than replacing them. It is this kind of rules-based response 
to hardware failure, which allows operation at a much lower cost, that 
characterizes service management in the cloud. 

Business Support Services 

The Business Support Services (BSS) module (Figure 3-3) defines the 
capabilities required to enable the business management of one or more specific 
managed cloud services. 



Figure 3-3 BSS architecture 

Cloud services represent any type of IT capability that is offered by the cloud 
service provider to cloud service consumers. Typical categories of cloud services 
are infrastructure, platform, software or business process services. In contrast to 
traditional IT services, cloud services have attributes associated with cloud 
computing, such as a pay-per-use model, self-service acquisition of services, 
flexible scaling, and sharing of underlying IT resources. The CCMP is designed 
to enable these cloud-specific capabilities through the OSS, while handling the 
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ongoing management of all of the provider’s cloud service instances. The BSS is 
responsible for handling all business-relevant aspects of a cloud service. 

For example, the billing service component of the BSS must be capable of 
performing billing for the consumption of virtual machine resources, a 
multi-tenancy capable middleware platform (platform as a service) and a 
multi-tenancy application such as collaboration or customer relationship 
management (software as a service). 

Other components of the BSS address service management and automation at 
the user interface level. These capabilities include a user-friendly self-service 
interface and service offering catalog through which consumers select, 
configure, arrange payment for and discontinue cloud services. 

The BSS delivers the functions required to operate a self-service cloud business. 
These include automated, rules-based execution of pricing, contracts and 
agreements, invoicing, clearing and settlement. The BSS also provides business 
management capabilities, including offering, customer, subscriber, order, 
fulfillment and entitlement management. This enables the business side of the 
cloud services paradigm. 


3.2 Mapping IBM products to the CCMP 

The IBM Cloud Service Management Platform provides business and 
operational support services for the CCMP. In this section we discuss how IBM 
products map to the components in the CCMP, including: 

► Solutions supporting the Operational Support Services 

► Solutions supporting the Business Support Services 
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The product mapping is shown in Figure 3-4. 
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Figure 3-4 Cloud architecture-to-solution mapping 


3.2.1 Solutions supporting the BSS 

There are two Tivoli products that support the BSS, Tivoli Service Request 
Manager® for Service Providers and Tivoli Usage and Accounting. Together 
these products provide the BSS functions as defined in the Cloud Service 
Management Platform. 

Tivoli Service Request Manager for Service Providers 

Tivoli Service Request Manager for Service Providers helps service providers 
provide service delivery capabilities for multiple customers in a single deployed 
instance. This product includes the following key features: 

► Reduces TCO by leveraging a single deployed instance to manage multiple 
customers 
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► Improves efficiency of service delivery with automatic notification and 
automatic assignments 

► Manages multiple customers in many physical locations and provide unique 
customer agreements and rules to define entitlement of services and pricing 

► Provides detailed and accurate billing with a review and approval cycle 
For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/servi ce-request-manager- 
sp/index.html 

IBM SmartCloud Cost Management 

IBM SmartCloud Cost Management, previously known as Tivoli Usage and 
Account Manager, accurately assesses shared computing resource usage. This 
allows organizations to understand their costs by tracking, allocating, and 
invoicing by department or user. 

This product includes the following key features: 

► Collect, analyze, and bill based on usage and costs of shared Microsoft 
Windows, UNIX, Linux, IBM i5/OS™ and VMware computing resources 

► Deliver detailed information and reports about the intricate use of shared 
resources while masking the underlying complexity 

► Transform raw IT data into business information for cost allocation that spans 
business units, cost centers, applications, and users 

► Consolidate a wide variety of usage data with Data Collectors and a powerful 
“business rules-driven” capability 

► Automate daily cloud and non-cloud collection and billing operations for easy 
administration 

For more information visit: 

http://www-01.ibm.com/software/ti vol i /products/usage-accounting/ 


3.2.2 Solutions supporting the OSS 

The CCMP is supported by multiple Tivoli products, each providing a different 
solution for functions in the OSS. 

► Change and Configuration Management Database and Tivoli Application 
Dependency Discovery Manager 

► Tivoli Provisioning Manager 
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► Tivoli Service Level Advisor and Tivoli Netcool Service Quality Manager 

► Tivoli Asset manager for IT 

► VMControl and Tivoli Productivity Center 

► Tivoli Service Automation Manager 

Tivoli Change and Configuration Management Database 

Tivoli Change and Configuration Management Database provides automated 
impact analysis and enables the quickest access to critical data that might cause 
outages due to change. This product includes the following key features: 

► Workflow-driven change processes, which reduce costs by making it quick to 
process a change, and reduce risk by planning and communicating the 
change before it actually occurs. 

► Blackout periods identify critical business periods when outages are 
expensive. Blackout periods can be restricted or locked down for maximum 
flexibility. 

► Multi-customer enablement or Service Provider support change and 
configuration management for multiple customers in a single deployment. 

► Configuration management database accuracy, which is ensured through 
complete audit and remediation processes that are ready for immediate use. 

► Visualization tooling, which allows for topology viewing, process progress 
maps, and work plan maps that maximize user productivity. 

► Workbench, which enables drag-and-drop definition of authorized 
configuration item space, thereby reducing time to value. 

Tivoli Change and Configuration Management Database has been included into 
a suite of products, delivered as the IBM SmartCloud Control Desk. 

For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/smartcl oud-control desk/ 

Tivoli Application Dependency Discovery Manager 

Tivoli Application Dependency Discovery Manager delivers automated discovery 
and configuration tracking capabilities to build application maps and provide 
real-time visibility into application complexity. The features of this product enable 
organizations to: 

► Understand the structure of interdependent and complex applications 

► Rapidly isolate configuration-related application problems, which reduces 
troubleshooting time from hours and days to minutes 
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► Better understand the impact of component-level events to sort issues based 
on application and service impact 

► More effectively plan change so that application upgrades and deployments 
can occur without disruptions 

► Create a shared topological definition of applications for use by other 
management applications, such as service level managers and provisioning 
tools 

For more information: 

http : //www-01. i bm.com/software/tivol i /products/taddm/ 

Tivoli Provisioning Manager 

Tivoli Provisioning Manager helps organizations optimize efficiency, accuracy, 
and service delivery by automating useful practices for data center provisioning 
activities, as listed here: 

► Help automate best practices for common data center provisioning activities 
in support of change and release management processes, thereby helping to 
optimize efficiency, accuracy, and service delivery 

► Discover and track data center resources to enable highly accurate server 
provisioning and software deployments 

► Create thousands of virtual machines simultaneously 

► Facilitate efforts to consistently follow an organization’s own policies and 
preferred configurations, in support of corporate and regulatory compliance 
efforts 

► Automatically provision software and configurations to Microsoft Windows 
servers and clients, and to Linux and UNIX servers 

► Help optimize availability by maintaining configurations and managing 
changes to resources 

For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/prov-mgr/ 

Tivoli Service Level Advisor and Tivoli Netcool Service Quality 
Manager 

Tivoli Service Level Advisor predicts when service level agreement violations are 
likely to occur, and then takes corrective actions to avoid an SLA violation. 

► It enables organizations to define SLAs easily using an SLA wizard, and 
provide SLA evaluations as often as hourly. 
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► It utilizes a trend analysis algorithm that enables organizations to take a 
proactive approach to service level management. 

► It integrates with the Tivoli Data Warehouse to consolidate and report on 
systems management data. 

► It provides enablement of mainframe and multivendor distributed systems 
management data for true end-to-end service level management. 

For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/servi ce-1 evel -advi sor/ 

Tivoli Netcool Service Quality Manager combines service level agreement and 
service quality management to help manage telecommunications service quality. 
It does this by providing end-to-end views of a service to help service providers 
understand quality of service from a customer’s perspective, with the following 
key features: 

► Monitoring and improving the quality of each customer experience, resulting 
in more effective customer care and increased customer satisfaction 

► Responding to network issues based on corporate directives such as 
revenue, profitability, service, and customer impact 

► Providing product differentiation to your enterprise sales team by offering 
guaranteed SLAs to attract and retain high-value enterprise customers 

► Enabling the successful, rapid introduction of new services that you can offer 
with confidence in their service quality 

► Identifiying high-priority problems quickly and accurately with powerful 
root-cause and impact analysis 

► Offering comprehensive data collection capabilities and extensive 
pre-established service models with full key quality indicator (KQI) and key 
performance indicator (KPI) mapping and reporting 

For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/netcool -servi ce-qual i ty- 
mgr/ 

Tivoli Asset Manager for IT 

Tivoli Asset Manager for IT enables effective management of the IT asset 
lifecycle to lower cost, mitigate license compliance risk, and better align IT with 
business goals with the following key features: 

► Optimizing software licenses and reducing the likelihood of overbuying and 
fines due to under-licensing 
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► Helping to control the cost of IT assets with a single solution that tracks and 
manages your hardware, software, and related information throughout their 
lifecycles. 

► Optimizing IT asset utilization and IT service levels: deploy not more, not less 

► Closely aligning IT with business requirements through IT asset cost and 
usage information 

► Reducing time, cost, and risk associated with compliance audits through 
comprehensive software license management 

► Relevant vendor, contract, lease, warranty and license data minimizes 
procurement and maintenance expenses and can help negotiate contract 
renewals 

► Improving service desk quality and incident resolution time with accurate IT 
asset information 

Tivoli Asset Manager for IT has been included into a suite of products, delivered 

as the IBM SmartCloud Control Desk. 

For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/smartcl oud-control desk/ 

VMControl and Tivoli Productivity Center 

VMControl is a IBM Systems Director plug-in that decreases infrastructure costs 

and improves service levels by providing complete virtual server lifecycle 

management with the following key features: 

► Brings together physical and virtual management into a single interface to 
reduce complexity. 

► Offers unmatched cross-platform and cross-operating system management, 
which helps improve service delivery by eliminating isolated silos of 
virtualization in heterogeneous environments. 

► Provides faster time-to-value and greater business agility through simplified 
virtualization management that allows more effective utilization of virtualized 
resources. 

► Establishes repeatable accuracy and consistency through automation. 

► Reduces operational and infrastructure costs through increased efficiency 
and resource utilization. 

For more information visit: 

http : //www-03 . i bm. com/systems/software/di rector/vmcontrol /i ndex . html 
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Tivoli Productivity Center provides storage infrastructure management tools that 
can help improve time to value and reduce the complexity of managing storage 
environments by centralizing, simplifying and automating storage management 
with the following key features: 

► Providing comprehensive visibility and helping centralize the management of 
an organization’s heterogeneous storage infrastructure from a single interface 
using role-based administration and single sign-on 

► Delivering common services for simple configuration and consistent 
operations across host, fabric, and storage systems 

► Managing performance and connectivity from the host file system to the 
physical disk, including in-depth performance monitoring and analysis of the 
SAN fabric 

► Supporting an organization’s virtualization initiatives by providing insights into 
data usage that will help to dynamically move data across alternate tiers of 
storage 

► Managing the capacity utilization and availability of storage systems, file 
systems, and databases 

► Monitoring, managing, and controlling (zone) SAN fabric components 

► Automating capacity provisioning of file systems 

► Monitoring and tracking the performance of SAN-attached SMI-S compliant 
storage devices 

For more information visit: 

http : //www-03. i bm.com/systems/storage/software/center/ 

Tivoli Service Automation Manager 

Tivoli Service Automation Manager provides users the ability to request, deploy, 
monitor, and manage cloud computing services through traceable approval 
processes, with the following key features: 

► Lower cost of service delivery through automation and reduced skill 
requirements 

► Deploy IT services faster to meet the increased need for development, test, 
preproduction, and production systems 

► Deliver a higher degree of standardization and automation for deployment 
and management of IT services, and reserve skilled IT staff member time for 
other, higher-value tasks 

► Provide traceable processes and approval routings to serve as audit trails, 
and integrate with process governance 
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► Offer an integrated management capability that addresses the lifecycle 
changes of a cloud service 

► Provide adaptable and automated preferred practices for building and 
managing IT infrastructures 

For more information visit: 

http : //www-01. i bm.com/software/tivol i /products/servi ce-auto-mgr/ 


3.3 Cloud Service Management Platform for Hybrid 
Cloud 

This section describes the Cloud Service Management Platform components 
that are enhanced for Hybrid Cloud environments: 

► Updated components to support Hybrid Cloud 

► New components to support Hybrid Cloud 
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Figure 3-5 shows these components and illustrates how they map to IBM 
products. 



Figure 3-5 Hybrid Cloud Enhanced Service Management Platform 


3.3.1 Updated components to support Hybrid Cloud 

For Hybrid Cloud environments, the BSS Offering Management and Service 
Offering Catalog components are updated to support services that are offered 
both in private and public clouds. 

In the OSS, the Service Delivery Catalog, Service Request, Provisioning, Service 
Templates and Service Automation Management components are updated to 
support the Hybrid Cloud environment. 

These updates allow the same CCMP to extend from the private cloud space to 
the Hybrid Cloud space. These changes to the BSS and OSS, in conjunction with 
the new Policy Management and Policy Enforcement components for the cloud 


56 Hybrid Cloud Integration and Monitoring with IBM WebSphere Cast Iron 






service providers, allow for a seamless experience for the cloud service 
consumer. 


3.3.2 New components to support Hybrid Cloud 

Two new components, Policy Enforcement and Policy Management, are added 
to the BSS to support Hybrid Cloud. 

Policy Management allows for a workload policy to be set for a given cloud 
service. For example, if a client wants a particular cloud service to never run 
higher than 75 percent CPU utilization, the client can set a policy for that in the 
Hybrid Cloud environment leveraging the BSS Policy Management features. 

Next, that policy of never allowing a cloud service to use more than 75 percent 
CPU utilization needs a mechanism for enforcement. The Policy Enforcement 
component is added to the BSS to allow the enforcement of policies set in policy 
management. In this example, Policy Enforcement will add additional machines 
to a cloud service to keep CPU utilization below 75 percent so the cloud service 
stays within the policies set by Policy Management. 
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Part 2 


Usage scenarios 


Integrating applications across clouds can introduce unique management 
challenges. The Service Management Extensions for Hybrid Cloud provide the 
necessary features that allow companies to integrate the monitoring, 
provisioning, events handling, and automating of service environments located 
across clouds, both on and off premises. 

In this part we introduce the Service Management Extensions for Hybrid Cloud 
and focus on the features it provides. The following chapters are included: 

► Chapter 4, “Monitoring scenario” on page 61 

► Chapter 5, “Provisioning scenario” on page 93 

► Chapter 6, “Directory Synchronization scenario” on page 153 

► Chapter 7, “Workload Governance and Management scenario” on page 173 
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Monitoring scenario 


In Chapter 2, “Integrating cloud solutions with Cast Iron” on page 15, a scenario 
is introduced based on a fictional, large transnational retail company called IBM 
Redbooks Store with 1000 stores. This company acquires another retail 
company with 100 stores to add to its portfolio of products. 

In this chapter we detail the monitoring portion of that scenario (2.9.2, 
“Monitoring” on page 35). The company plans to use its Tivoli Monitoring system 
to monitor CPU use to accommodate the additional capacity needed in the 
months of October, November, and December. 

In this chapter we discuss the following topics: 

► Monitoring scenario overview 

► Installation and configuration 

► Verifying the installation 

► Running a CPU monitoring test for the Workload Governance and 
Management scenario 

► Lessons learned 

► Preferred practices 

► Summary 
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4.1 Monitoring scenario overview 


The main objective of the monitoring scenario is to provide the ability to monitor 
servers deployed in the public clouds using an on-premise deployment of IBM 
Tivoli Monitoring. Virtual machines in the cloud are monitored and results are 
displayed along with the on-premise machines. 

Monitoring in a hybrid cloud environment serves the same purposes as it does in 
the traditional enterprise: administrators can monitor availability, resource usage, 
problems, and service-level compliance. In addition to visibility, monitoring 
provides automation and notification capabilities. 

Monitoring has a special importance in a hybrid environment. When the 
computing environment capacity can dynamically increase or decrease, 
administrators need visibility. Increased capacity and performance are balanced 
against increased cost. At one extreme, a solution is too costly if utilization is low. 
At the other extreme, performance can suffer if the resources are insufficient. 
Administrators need visibility and usage data to make decisions about the 
right-sized environment for their needs. 

The Monitoring scenario utilizes extensions to IBM Tivoli Monitoring (ITM), 
providing the ability to monitor servers within IBM SmartCloud and Amazon EC2. 
In the example shown in Figure 4-1 on page 63, IBM SmartCloud is used. 
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IBM Tivoli Monitoring resides on premise. A cloud gateway agent is installed and 
configured. It allows traffic to pass through a firewall. Agents are deployed onto 
the virtual machines in the cloud. 

In this scenario, the IBM Redbooks store experiences peak seasonal usage each 
year in October through December. The system is designed to provision into the 
cloud for peak needs. The requirement is that both the machines in the cloud and 
the on-premise machines need to be monitored. In particular, the CPU usage of 
the cloud machines are monitored to detect high utilitization rates. High utilization 
rates trigger alerts that can be automated to provision additional resources. The 
key role monitoring plays is to detect when the elastic cloud needs expand. 
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4.2 Installation and configuration 


This section describes how to set up the monitoring scenario. It does not address 
the full installation of the products. Only the installation steps that are relevant for 
the integration monitoring scenario are discussed. 


4.2.1 Install Service Management Extensions for Hybrid Cloud 
plug-ins 

This section explains the high level steps needed to install the Service 
Management Extensions for Hybrid Cloud plug-ins. Plug-ins add the integration 
capabilities needed to pass control and data between the monitoring server that 
is on premise and the agents in the cloud. 

1 . The WebSphere Cast Iron integration appliance must be at revision level 
6.1 .0.2 or higher. To verify the revision level, log on the Web Management 
Console using a supported browser. Use the management IP address for the 
integration appliance. 

http://C7name/login/ 
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2. From the Web Management Console, select System and verify the operating 
system level as shown in Figure 4-2. 



Figure 4-2 System summary in the Web Management Console 

3. Log on to the WebSphere Cast Iron Design Console at: 

http://Ci7?ame/express/ 

Cl name is the host name or management IP address of the WebSphere Cast 
Iron integration appliance. The default values are: 

- Username: admi n 

- Password: !n0rlt5@C 
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4. Click the user name in the top right corner of the WebSphere Cast Iron 
Design Console application window (Administrator in Figure 4-3). 


j & WebSphere Cast Iron web ... xj © WebSphere Cast Iron Expr... x 
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Install new bundles, and upgrade or remove existing 
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No recent activity 



O-OofO 


Page 

Previous | Next 


Figure 4-3 WebSphere Cast Iron Design Console 


5. From the drop-down menu, select Manage Bundles from the list or in the 
Cast Iron Design Console window, then click Manage Bundles on the left 
navigation panel to open the panel shown in Figure 4-4. Then click Install 
New Bundle. 


Cast Iron Design Console Ho ™ lntegrations 



Browse... | Install New Bundle 

Bundle Name Version * Vendor Licence Install Date 

No installed bundles found. 


Figure 4-4 Manage bundles 


6. Click Browse and select a .brcypt bundle file (Figure 4-5 on page 67). Notice 
there are different bundles for a physical or virtual WebSphere Cast Iron 
Appliance. 

Install the monitor ing-bundle_virtual.bcrypt plug-in file if you are using the 
virtual appliance, WebSphere Cast Iron Flypervisor Edition. 

Install the monitoring-bundle jphysical.bcrypt plug-in file if you are using the 
physical hardware appliance, WebSphere DataPower Cast Iron Appliance 
XH40. 
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Then click the Upload button. In this scenario, the hypervisor edition is used. 
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10/7/2011 5:58 AM 

■ Downloads 


monitoring-bundle_vi rtual. bcrypt 

10/7/2011 5:58 AM 

Recent Places 


provi si oning-bundle_physi cal. bcrypt 

10/7/2011 5:58 AM 



provisioning-bundle_vi rtual. bcrypt 

10/7/2011 5:58 AM 

Libraries 


tdi -bundl e_physi cal .bcrypt 

10/7/2011 5:59 AM 

' Documents 
Music 
*- Pictures 
§ Videos 


tdi -bundle_vi rtual. bcrypt 

10/7/2011 5:59 AM 


Figure 4-5 Manage bundles installation list 


7. Click Install New Bundle (Figure 4-6). 


Cast Iron Design Console Ho ™ lntegrations 



C:\softwarethybridClou Browse... | j Install New Bundle \ 

Bundle Name Version * Vendor Licence Install Date 

New Bundle ... ... |_ 100% 



Figure 4-6 Install the new bundle 

8. The License Agreement is displayed. To install the plug-in, select Accept. 
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9. Verify that the installation was successful (Figure 4-7) and click OK. 



Figure 4-7 Checking the installation status 

10. Figure 4-8 shows that the Service Management Extensions for Hybrid Cloud 
monitoring plug-in was successfully installed. 


Cast Iron Design Console Ho ™ lntegrations 



Browse... | Install New Bundle 

Bundle Name Version * Vendor Licence Install Date 

Monitoring 7.2.1. 0 ibm i 2012-03-01 21:54:45 


Figure 4-8 Version, date, and time of successful installation monitoring plug-in 


4.2.2 Install IBM Cloud Gateway Agent on IBM SmartCloud Enterprise 

This section explains the function of the IBM Tivoli Monitoring Cloud Gateway 
Agent and its installation. 

The IBM Tivoli Monitoring Cloud Gateway Agent acts as a proxy for the Tivoli 
Enterprise Monitoring Server and listens for connections from the enterprise into 
the cloud. The Cloud Gateway Agent integrates the resource metrics for other 
cloud agents. This agent is required for the monitoring and workload governance 
scenarios. 
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In this scenario, the IBM SmartCloud is used. An account on the cloud system is 
a prerequisite. 

To install the Cloud Gateway Agent, follow these steps: 

1 . Create an instance of an image in the IBM SmartCloud Enterprise. 

For more information, see the IBM SmartCloud Enterprise User’s Guide at 

https : //www-147 . i bm. com/cl oud/enterpri se/dashboard 


IBM SmartCloud 

Enterprise 



J r * * Control panel 

Account 

Support 


Sign in 

Enter your User ID and password, and click Submit to sign in. 


User ID: 
Password: 


(e.g.Joe@us.ibm.com) 


Submit 

Register 


Forgot password? 


Figure 4-9 IBM SmartCloud Enterprise welcome panel 


2. Install the Cloud Gateway Agent. 

In this step, a Linux Tivoli Monitoring agent in the IBM SmartCloud Enterprise 
cloud is installed for use as a gateway: 

a. Log on the Linux instance at the IBM SmartCloud Enterprise environment 
using the default account idcuser. 

b. Start a root shell session with the sudo bash command. 
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c. Install the Linux Tivoli Monitoring agent into the instance, as described in 
http : // publ ib.boulder.ibm.com/infocenter/tivihelp/vl5rl/topic/com 
. i bm. i tm. doc_6 . 2 . 2fp2/i nstal 1 ati on . htm#i nstal 1 ati on 

Example 4-1 shows a typical installation sequence using the . / i nstal 1 . sh 
command. 

Example 4- 1 Installation of the Linux Tivoli Monitoring agent 
./instal 1 .sh 

Enter the name of the IBM Tivoli Monitoring directory 
[ default = /opt/ I BM/ ITM ]: 

ITM home directory "/opt/IBM/ITM" already exists. 

OK to use it [ 1-yes, 2-no; "l" is default ]? 

Select one of the following: 

1) Install products to the local host. 

2) Install products to depot for remote deployment (requires 
TEMS). 

3) Install TEMS support for remote seeding 

4) Exi t i nstal 1 . 

Please enter a valid number: 1 


The following products are available for installation: 


1) Agentless Monitoring for AIX Operating Systems V06.22.02.00 

2) Agentless Monitoring for HP-UX Operating Systems 
V 06.22.02.00 

3) Agentless Monitoring for Linux Operating Systems 
V06.22.02.00 

4) Agentless Monitoring for Solaris Operating Systems 
V06.22.02.00 

5) Agentless Monitoring for Windows Operating Systems 
V06.22.02.00 

6) Monitoring Agent for Linux OS V06.22.02.00 

7) Monitoring Agent for UNIX Logs V 06.22.02.00 

8) Tivoli Enterprise Services User Interface Extensions 
V06.22.02.00 


9) Universal Agent V 06.22.02.00 

10) all of the above 
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Type the numbers for the products you want to install, type "b" 
to change operating system, or type "q" to quit selection. 

If you enter more than one number, separate the numbers by a 
comma or a space. 

Type your selections here: 6 

The following products will be installed: 

Monitoring Agent for Linux OS V06.22.02.00 

Are your selections correct [ l=Yes, 2=No ; default is "l" ] ? 

... installing "Monitoring Agent for Linux OS V06.22.02.00 for 
Linux Intel R2.6 (32 bit)"; please wait. 

=> installed "Monitoring Agent for Linux OS V06.22.02.00 for 
Linux Intel R2.6 (32 bit)". 

... Initializing component Monitoring Agent for Linux OS 
V06.22.02.00 for Linux Intel R2.6 (32 bit). 

... Monitoring Agent for Linux OS V06.22.02.00 for Linux Intel 
R2.6 (32 bit) initialized. 


Do you want to install additional products or product support 
packages [ l=Yes, 2=No ; default is "2"] ? 

... postprocessing; please wait. 

... finished postprocessing. 

Installation step complete. 

You may now configure any locally installed IBM Tivoli Monitoring 
product via the "/opt/IBM/ITM/bin/itmcmd config" command. 


3. Configure the Cloud Gateway Agent. 

This step will configure the Cloud Gateway Agent in the IBM SmartCloud 
Enterprise cloud to connect to the local IBM Tivoli Enterprise Monitoring 
Server: 

a. Log on to the Linux IBM SmartCloud Enterprise instance as the default 
user idcuser, as described in IBM SmartCloud Enterprise User’s Guide. 

b. Use the sudo bash command to start a shell session as the root user. 

c. Enter the following command: 

# /opt/IBM/ITM/bin/itmcmd config -A lz 
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d. Accept the default values at each prompt, except for the TEMS Host Name 
prompt. 

When prompted for the TEMS Host Name, enter 1 ocal host to ensure that 
the configuration remains independent of the actual host name. The agent 
connects to itself because it acts as the cloud gateway, and provides 
monitoring information about the host where it is installed. 

Will this agent connect to a TEMS? [1= YES , 2=No] (Default is: 1) : 
TEMS Host Name (Default is: vhostll65): localhost 

e. Create the /opt/I BM/ITM/gateway directory and change to the gateway 
directory using the following commands: 

# mkdir /opt/IBM/ITM/gateway 

# cd /opt/IBM/ITM/gateway 

f. Configure the Cloud Gateway Agent firewall gateway: 

i. Create the /opt/IBM/ITM/gateway/gateway.xml file. 

ii. Copy and paste the information shown in Example 4-2 to the file. 

Example 4-2 Gateway.xml contents 

<tep: gateway xmlns:tep="http://xml .schemas.ibm.com/tivol i /tep/kde/ 11 name= l, sproxy M 
threads = l, 32 ll > 

<zone name= l, DMZ2 M maxconn= l, 512 M error= l, ignore ll > 

<interface name="uprel ay" rol e="l i sten"> 

<!-- Let the on-premises gateway server talk to us over port 10,005. --> 

<bind local port=" 10005'7> 

<!-- 

Ports that we proxy over to the on-premises gateway. 

Important: The "service" tag values here must be an exact match with 
the services defined in the on-premises side. Keep them in synch. 

- -> 

interface name="serverproxy" rol e="proxy"> 

<!-- IP. PIPE Port 1918 is for TEMS, 6014 is for Warehouse Proxy (TDW) --> 

<bind localport="1918" servi ce="tems_pi pe" /> 

<bind localport="6014" servi ce="whp_pi pe" /> 

<bind localport="1918" servi ce="tems_pi pe" ipversion="6 l, /> 

<bind localport="6014" servi ce="whp_pi pe" ipversion="6 l, /> 

<!--IP.SPIPE Port 3660 is for TEMS, 7756 is for Warehouse Proxy (TDW) --> 

<bind localport="3660" servi ce="tems_spi pe" /> 

<bind localport="7756" servi ce="whp_spi pe" /> 

<bind localport="3660" servi ce="tems_spi pe" ipversion="6 l, /> 

<bind localport="7756" servi ce="whp_spi pe" ipversion="6 l, /> 

</interface> 

</interface> 

</zone> 
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</tep:gateway> 


g. Change to the /opt/IBM/ITM/config directory. 

# cd /opt/IBM/ITM/config 

h. Edit the 1z.ini configuration file. Add or modify the following three 
attributes and values: 

CTIRA_HEARTBEAT=5 

CTIRA_REC0NNECT_WAIT=5 

KDE_GATEWAY=/opt/IBM/ITM/gateway/gateway.xml 

CTIRAJHEARTBEAT and CTIRA_RECONNECT_WAIT values are in 
minutes. In this case CTIRA_HEARTBEAT=5 indicates five minutes 
between heartbeats. 

Warning: Modifying these attributes in this way for every agent can 
impact performance. 

i. Ensure the firewall ports specified in the gateway. xml file are open. 

The gateway. xml file contains a local port attribute. Use this attribute to 
specify inbound ports to allow the Cloud Gateway Agent to connect to the 
Tivoli Enterprise Monitoring Server. You also need to specify a port of your 
choice to connect the Enterprise Gateway Agent to the Cloud Gateway 
Agent. 

These ports must be open for inbound connections on operating systems 
where the agent is installed. 

If the Tivoli Enterprise Monitoring Server uses a IP.PIPE connection, open 
port 1918 (Tivoli Enterprise Monitoring Server) and port 6014 (Warehouse 
Proxy agent). For an IP.SPIPE connection, open port 3660 (Tivoli 
Enterprise Monitoring Server) and port 7756 (Warehouse Proxy agent). 
You will also need port 10005 opened for inbound connections to enable 
the enterprise gateway agent to connect to the cloud gateway agent. 

4. Save the image for reuse. You can use this instance as a template to 
provision multiple cloud images. 

5. Start the Cloud Gateway Agent. 

To start the IBM Cloud Gateway agent use itmcmd command, as follows: 

# cd /opt/ IBM/ITM/bi n 

# ./itmcmd agent start lz 

Starting Monitoring Agent for Linux OS ... 

Monitoring Agent for Linux OS started 
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6. Configure Cloud Agents to connect to the Cloud Gateway Agent. 

a. Use the same process to install the ITM Linux Monitoring Agent. 

b. After installation is complete, using the sudo bash command to start a shell 
session as the root user, and run the following command: 

# /opt/IBM/ITM/bin/itmcmd config -A Iz 

c. Accept all the default value at each prompt except for the TEMS Host 
Name prompt. 

When prompted for the TEMS Host Name, enter the IP address of the 
Cloud Gateway machine. The agent connects to the cloud gateway, which 
forwards monitoring information to the TEMS in the private cloud. 

Will this agent connect to a TEMS? [1=YES, 2=No] (Default is: 1) : 
TEMS Host Name (Default is: vhostll65): 170 . 225 . 100.145 

7. During the Linux IBM Tivoli Monitoring agent install, the 

/etc/ini t.d/ITMAgentsl file is generated. This process enables an autostart 
of the Tivoli Monitoring agents as the root user. However, by default, the root 
user does not have a login shell in the cloud. 

Modifications to the file will be overwritten, and will need to be repeated, if the 
/opt/IBM/ITM/bin/itmcmd config -A lz configuration command is executed 
again. 

To enable the root user to autostart cloud agents, make the following 
modifications to the ITMAgentsI file. 

The original entry is shown in Example 4-3. 

Example 4-3 Original ITMAgentsI commands 

start_al 1 () 

{ 

/bin/su - root -c " /opt/IBM/ITM/bin/itmcmd agent start lz 
>/dev/nul 1 2>&1" 

} 

stop_al 1 () 

( 

/bin/su - root -c " /opt/IBM/ITM/bin/itmcmd agent stop lz >/dev/null 
2 >& 1 " 

} 


The edited entry is shown in Example 4-4. 

Example 4-4 Edited ITMAgentsI commands 

start_al 1 () 

{ 
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sudo $CANDLEHOME/bin/i tmcmd agent start lz >/var/l og/i tmcmd. 1 og 2>&1 

} 

stop_al 1 () 

{ 

sudo $CANDLEHOME/bin/i tmcmd agent stop lz >/dev/null 2>&1 

} 


4.2.3 Creating the integration 

In this section we explain how to create an integration in the Cast Iron appliance 
to monitor Linux on public clouds: 

1 . Log on to the WebSphere Cast Iron Design Console. 

2. Select the source and target of the integration: 

a. Click Integrations on the main window. 

b. Select Tivoli Monitoring Server as the source. 

c. Select Off Premise Agent as the target. 

Figure 4-10 shows the results. 


Cast Iron Design Console 


Create 

Fill out basic source and target information below. We will find you 
any matching templates. 

Source 

Tivoli Monitoring Server 

Target 

Off Premise Agent 

Templates 

Tivoli Monitoring Integration Use @ 

Cantfind what you're looking for? 

New Blank Integration 

Figure 4-10 Select the source and target of the integration 
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d. Click New Blank Integration. 


Tip: After installing the monitoring Service Management Extension for 
Hybrid Cloud plug-in, if it does not display Tivol i Monitoring Server at 
the drop-down box, then refresh your browser. 


3. Enter a unique and descriptive name for the integration and save. In this 
example, the name is Ti vol i Monitoring Server to Off Premise Agent. 


WebSphere Cast Iron web ... 

& WebSphere Cast Iron Expr... x 

HIBM Integrated Service Man... x 




Cast Iron Design Console Home lnteg ™ tions 


Tivoli Monitoring Server to Off Premise Agent 

(3 Source @ Target 

You have not yet selected any source fields. Please expand and You have not yet selected any target 
complete the source information complete the target information 

Figure 4-11 Unique name for integration 

4. Click the Source tab to enter the connection properties for the source; see 
Figure 4-12 on page 77. 

a. Specify a Name and Hostname (or IP Address) 

b. Verify the port configuration and protocol IP. 
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Figure 4-12 Source configuration 


The default values are: 

- Port 1918forTEMS 

- Port 6014 for ITM Warehouse 

- Protocol IP is ip.pipe 

c. Click Connect to start the connection; see Figure 4-1 3 on page 78. 
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Figure 4-13 Source connection accepted 

5. Click the Target tab to enter the connection properties for the target of the 
integration (Figure 4-14 on page 79): 

a. Specify a Name and Hostname (or IP Address). 

b. Specify the port number for the outbound connection from the appliance to 
the off-premise agent. 

c. Click Connect; see Figure 4-14 on page 79. 
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Figure 4-14 Target connection accepted 


Use the same port: This port must be the same as configured in 
gateway. xml on the agent. 

<!-- Let the on-premises gateway server talk to us over port 10,005. --> 
cbind localport= M 100057> 

<!— 

Our example is 10005. 
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6. Return to the original window and click Save to save the integration 
(Figure 4-15). 


WebSphere Cast Iron web ... x WebSphere Cast Iron Expr... x 


Cast Iron Design Console 


Home Integrations 


Welcome back Administrator - 


Tivoli Monitoring Server to Off Premise Agent 


© Source 




©Target 


You have not yet selected any source fields. Please expand and complete You have not yet selected any target fields. Please expand and complete 
the source information the target information 


Figure 4-15 Save integration 


A message is displayed indicating the integration has been saved 
successfully (Figure 4-16). 



Figure 4-16 Successful integration saved 
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7. To start the integration, click the play icon (Figure 4-17). 


1 0 WebSphere Cast Iron web ... x ( (13 WebSphere Cast Iron Expr... x | 


Cast Iron Design Console Home "" e 9 i a,ions 

Welcome back Administrator » i^M 


Create 

Fill out basic source andt 
any matching templates. 

Source 


Tivoli Monitoring Server 


i 


Integrations 




Name + 

Updated 

Updated by 

Status 

TSAM to IBM Compute Cloud 

March 2, 201 2 1 2:44:34 AM GMT 

admin 

^ Running HI x 

Tivoli Monitoring Server to Off Premise 
Agent 

March 9, 2012 10:29:57 PM GMT 

admin 

■ Stopped ► x 



Target 


Templates 

Tivoli Monitoring Integration 
Cant find what you're looking for? 

New Blank Integration 


f 


Use @ 


Figure 4-17 Start integration 

8. Verify that the integration is running successfully (Figure 4-18). 


Integrations 




Name 

^ Updated 

Updated by 

Status 

ITSO Tivoli Monitoring Server to Off 
Premise Agent 

March 14,2012 1:46:22 PM GMT 

andre 

Running 11 X 


Figure 4-18 Integration started successfully 


4.3 Verifying the installation 

Perform the following steps to check monitoring status at server on the IBM 
SmartCloud Enterprise. 


4.3.1 Log in to IBM Tivoli Monitoring 

There are several ways to connect to IBM Tivoli Monitoring. In this example we 
use the web application. 

1 . Open the Tivoli Enterprise Portal Web page: 

http://7FP address : 1920///cnp/kdh/l ib/cnp.html 
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2. Use your login and password to connect, as shown in Figure 4-19. 


A D- 


[ 1 Tivoli Enterprise Portal® L±i 

4 1 □ 10 . 7 . 28 . 152 : 1920///cnp/kdh/lib/cnp.html 


Enterprise Portal 




Figure 4-19 TEP Login panel 
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4.3.2 Verifying the new Linux agent is shown in dashboard 


Figure 4-20 shows the Tivoli Enterprise Portal dashboard before the monitoring 
integration has been started. 



Figure 4-20 Initial TEP dashboard 
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After the integration is up and running, the SmartCloud Enterprise Linux agent 
appears in the Tivoli Enterprise Portal; see Figure 4-21. 


FirefoK T 



Figure 4-2 1 TEP Dashboard after integration 


4.3.3 Verifying the monitoring scenario is working 

Perform the following steps to create a situation monitoring test: 

1 . On the IBM Tivoli Monitoring dashboard, create a situation. A situation raises 
an alert when the monitored condition occurs. Situations can be used to alert 
operations staff, but they can also be forwarded to an event handler to trigger 
automated responses. 

Using the right-click button, click the Linux server icon and select situations 
to open the situation editor. 

2. Click the second icon at the top of the window to create a new situation. 
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3. To verify that monitoring is working properly, create a ping test situation. This 
situation, shown in Figure 4-22, raises an alert if the ping process is not 
running on the monitored agent. 



Figure 4-22 Ping test situation 
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4. Apply the situation and check the ITM dashboard. On the monitored system, 
verify that the ping process does not exist. Then verify that an alert is 
triggered as shown in Figure 4-23. 



Figure 4-23 Dashboard after enable ping situation 

5. This test verifies that the integration between IBM Tivoli Monitoring and 
WebSphere Cast Iron is up and running. Just to double-check, create the ping 
process by running ping on the monitored system as shown in Figure 4-24. 


[ root: @ vbo s 1 1 165 bin] # p iag www . redboo ks . ibm . com 

PING dispsd-45-redbk. boulder. ibm. com ( 170 . 225 . 15 . 45} 56(84} bytes of data. 
64 bytes from 170.225.15.45: icmp_seq=l ttl=242 time=7.75 ms 

64 bytes from 170.225.15.45: icmp_seq=2 ttl=242 time=7 . 53 ms 

64 bytes from 170.225.15.45: icmp_seq=3 ttl=242 time=7.85 ms 

64 bytes from 170.225.15.45: icrap seq=4 ttl=242 time=7 . 35 ms 

I 


Figure 4-24 Ping process running 
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6. Close the existing alert so the dashboard now looks like Figure 4-25. 



Figure 4-25 Dashboard after ping process start 

7. Check the message log to verify the alert status is closed (Figure 4-26). 


n MV Acknowledged Events 


✓ z m B □ x 


Severity Status Owner Name Display Item 


Source Impact Opened Local Timestamp Type UUID Node Reference ID 


Ut Message Log f Z- H B □ X 


Status 

Name 

Display Item 

Origin Node 


Global Timestamp 

Local Timestamp 


2 Closed 

Linux_ITSO_ping 

ping 

vhostl 1 65:LZ 


03/1 4/1 2 10:52:28 

03/1 4/1 2 10:52:28 

TE^_ 

|^j Closed 

*STATUS_UN KNOWN 


vhostl 1 65:LZ 




vhi 

3 Closed 

*STATUS_UN KNOWN 


vhostl 165:LZ 



vhJ 

Iv'l ninQpH 

*RTATI IS 1 IMKMnWM 


whnptl 1 fi^'l 7 



wh 1 


Figure 4-26 Close alert status 

Another situation alert will not be shown until you stop the ping process. 
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4.4 Running a CPU monitoring test for the Workload 
Governance and Management scenario 


As part of Workload Governance and Management scenario, CPU monitoring is 
used to start the provisioning at the SmartCloud Environment. The concept is to 
detect high CPU usage and automatically respond to it by provisioning another 
virtual machine to handle the load. This section describes how to configure CPU 
monitoring to detect high usage. 

First create the situation by selecting System CPU Percent and choosing the 
threshold value to generate the alert. In this example, the threshold is higher 
than 50. The situation is shown in Figure 4-27. 



Figure 4-27 CPU monitoring situation 

To test this situation, you can create a stress test on the Linux agent that will 
consume more than 50 percent of the available CPU. Alternatively, just to test 
the situation, you can monitor for a much lower threshold. After verifying the 
situation, raise the threshold to the desired level. 
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When a situation is triggered, IBM Tivoli Monitoring can be configured to respond 
automatically. In a production system, you would not react to a single spike in 
usage as shown in this example. IBM Tivoli Monitoring can be configured to react 
to trends rather than to transient behavior. 

When high CPU usage is detected, the situation can be forward to Omnibus for 
further action. See Chapter 5, “Provisioning scenario” on page 93 for information 
about how to configure the response to the alert. 


4.5 Lessons learned 

This section discusses various lessons learned by the authors while setting up 
this scenario: 

► After installing the extension plug-in, reload the browser. 

► The log files are useful for diagnostics: 

a. To access log files from the WebSphere Cast Iron integration appliance 
using the Web Management Console, select System > Commands > 
Download postmortem (Figure 4-28). 

b. Select Go and then Download. 



Figure 4-28 Command to download log files from integration appliance 
c. Save the file (Figure 4-29 on page 90). 
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Figure 4-29 All log files from WebSphere Cast Iron integration appliance 

d. The resulting file is postmortem_al 1 .tar.gz. Uncompress this file. 

The postmortem directory has three subdirectories: 

- usr: 

- var: 

- wip: This directory has installation log files for the plug-ins. 

The postmortem/var/log directory includes wmc.out, which can be helpful in 
finding connection problems (Figure 4-30). 


integTEMSPortStatus value is :not connected 
integWHPPOrtStatus value is :not connected 
: 10005 integDounStreamStatus value is :SYN_SENT 

Figure 4-30 Example diagnostic information from wmc.out file 

The postmortem\wi p\omni apps\pl ugi ns\i nstal 1 \i bm directory has the 
following files and folders that you might find useful: 

- M9: monitoring plug-in 

postmortenAwi p\omni apps\pl ugi ns\i nstal 1 \i bm\M9\7 . 2 . 1 .0\runtime\IT 
M\gateway\gateway . xml 

- provisioningplugin: provisioning plug-in 

- tdi : Tivoli Directory Integrator 
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► On the WebSphere Cast Iron integration appliance, use the netspect 
command to diagnose problems, as shown in Figure 4-31 . 


ci - 192- 168- 1- 128/Standalone> netspect ping host 170. 225. 10Q. 145 
Pinging host 170.225.100.145 ... 

PING 170.225.100.145 (170.225.100.145) 56(84) bytes of data. 

64 bytes from 170.225.100.145: icmp_seq=l ttl=128 time=71 . 9 ms 

64 bytes from 170.225.100.145: icmp_seq=2 ttl=128 time=73. 0 ms 

64 bytes from 170.225.100.145: icmp_seq=3 ttl=128 time=71.4 ms 

64 bytes from 170.225.100.145: icmp_seq=4 ttl=128 time=70.9 ms 

— 170.225.100.145 ping statistics — 

4 packets transmitted, 4 received, 0% packet loss, time 3015ms 
rtt min/avg/max/mdev = 70.904/71.837/73.090/0.809 ms 

Figure 4-31 Using the netspect command 

► On the virtual machine, the netstat -an command helps identify port issues. 


4.6 Preferred practices 

This section discusses preferred practices for the monitoring plug-in. 

► When choosing a name for a new integration, choose a unique and 
descriptive name. 

► Identify necessary ports and make sure they are not being blocked by 
firewalls. Document which ports you are using, especially if you choose to 
change default values. Identify any network address translation (NAT) issues 
which impacts the addressing and plan for them. 

► Identify any dependencies between the monitoring and other scenarios. For 
example, if provisioning new virtual machines, what are the monitored 
conditions that are to be reported to trigger provisioning? The criterion of 
50 percent CPU utilization in this example is probably not adequate for a 
production system. 

► Save and reuse virtual machines that have been properly configured. 

► If you are planning to run many agents simultaneously, be aware that 
heartbeat and timeout values can impact performance. In the 1 z . i ni file, the 
CITIRA_HEARTBEAT and CTIRA_RECONNECT_WAIT values may need to 
be tuned in systems with many agents. 
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4.7 Summary 


In this chapter, the monitoring plug-in was installed and configured on the 
WebSphere Cast Iron integration appliance. A gateway agent was deployed to 
facilitate communication between the monitoring server on premises and the 
virtual machine operating system agents in the cloud. 

A situation was created to verify that virtual machines in the cloud can be 
monitored on the same TEMS as local hosts. 

The next step is to create a monitor to detect peak usage so corrective action can 
be taken. 
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Provisioning scenario 


In this chapter we detail the Provisioning scenario of the fictitious, multinational 
retail company, IBM Redbooks Stores, which recently made an acquisition. As a 
result of this acquisition, the company needs to complete the following tasks: 

► Integrate the IT systems of the acquired company with its own IT 
infrastructure 

► Add new features into its existing applications to allow a common set of 
applications for both companies 

In this scenario, to meet the first requirement, the Chief Information Officer (CIO) 
had to decide whether to integrate the new IT infrastructure in the company’s 
data center or to deploy it off premise. The IBM Redbooks Stores data center 
was full and unable to support additional systems. Because creating new space 
takes time and is expensive, the CIO decided to deploy new systems using 
SmartCloud Enterprise, which was already in use for other workloads. 

To meet the second requirement, the CIO told the development team to make 
changes with existing applications. To ensure that new features will not impact 
existing applications, the project manager required new environments for 
development, functional, and performance tests. The CIO decided to provide 
these temporary environments using SmartCloud Enterprise to avoid new capital 
expenses. 

IBM Redbooks Stores currently has a private cloud managed platform on 
premise, based on IBM Service Delivery Management. Users are trained to use 
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the IBM Service Delivery Management administration portal, and the CIO does 
not want to add a new user experience to provision and release services through 
SmartCloud Enterprise. The CIO asked IBM to extend the existing capabilities of 
the portal for requesting a cloud service either on premise or through SmartCloud 
Enterprise. IBM agreed to add new services to the service catalog and provide 
these services through a unique portal. 

In this chapter we discuss the following topics: 

► Provisioning scenario overview 

► Installing and configuring the Provisioning scenario 

► Scenario usage 

► Lessons learned 

► Summary 
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5.1 Provisioning scenario overview 


The Provisioning scenario provides the user with a single interface that has the 
ability to provision a cloud service either on premise or in a public cloud. So, the 
user has only one user experience and learning curve for all places where 
services are deployed. The Provisioning scenario uses extensions to Tivoli 
Service Automation Manager and provides the ability to provision servers within 
IBM Smart Cloud. Figure 5-1 illustrates an overview of this scenario. 



In the cloud management environment (Tivoli Service Automation Manager), two 
new service definitions are added. Management plans are then implemented to 
trigger provisioning and decommissioning. 

The following new offerings are available: 

► Create Project with IBM Compute Cloud Servers 

► Add IBM Compute Cloud Server 
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In addition, the following existing offerings now support IBM SmartCloud: 

► Remove Server 

► Cancel Project 


5.2 Installing and configuring the Provisioning scenario 

At a high level, you need to complete the following steps to set up the 
Provisioning scenario: 

► Installing the Service Management Extensions for Hybrid Cloud 

► Creating the integration 

► Installing the Tivoli Service Automation Manager Hybrid Cloud Extension 

Important: The process described here covers only the installation steps that 
are relevant for the integration of the Provisioning scenario. It does not cover 
the full installation of the products. 


5.2.1 Installing the Service Management Extensions for Hybrid Cloud 

The first step is to install the Service Management Extensions for Hybrid Cloud. 
Refer to 2.8, “Installing the Service Management Extensions for Hybrid Cloud” on 
page 29 for installation instructions. 

5.2.2 Creating the integration 

To create an integration in the Cast Iron appliance that is used during the 
provisioning to public clouds, follow these steps: 

1 . Log in to the WebSphere Cast Iron Design Console using an address similar 
to the following, where CIname is the host name of the Cast Iron appliance or 
its IP address: 

http://C/A7Cfme/express 

Use the following user name and password to log in: 

Username: admin 

Password: !n0rlt5@C 


Tip: If you have changed the password, use the new password that you 
created. 
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Figure 5-2 WebSphere Cast Iron Design Console login 


2. Select Source and Target. Then complete these steps (Figure 5-3 on 
page 98): 

a. Click Integrations in the toolbar to show the Create panel. 

b. Select TSAM as the Source. 

c. Select IBM Compute Cloud as the Target. 

d. Click New Blank Integration. 

Important: Do not use the Existing Connection drop-down list. Using this 
drop-down list will lead to unusual behavior of the appliance. 
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0 ° WebSphere Cast Iron Des-ign Console 
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Tivoli Self Service Stati... © WebSphere Cast Iron ... 


Cast Iron Design Console 


Create 

Fill out basic source and target information below. We 
will find you any matching templates. 

Source 


TSAM 



Templates 


TSAM to IBMCC 

Use @ 


New Blank Integration 


Integrations 

Name 


Figure 5-3 Select Source and Target 


3. Save the integration. 
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4. After the integration is defined, name each endpoint (source and target) and 
save it (Figure 5-4). 



Figure 5-4 Finalize the integration 
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5. Click the Source tab to open the detail panel. Complete the details, and then 
click Connect (Figure 5-5). 



Figure 5-5 Complete the source details 


100 


Hybrid Cloud Integration and Monitoring with IBM WebSphere Cast Iron 



6. Click the Target tab to open the detail panel. Complete the details, and then 
click Connect as shown in Figure 5-6. 


Cast Iron Design Consd 


TSAM to IBM Compute Cloud 


t 2 Target 


@ CTGHC0007I: Connection 
information accepted. 

Connection Type 

llBM Compute Cloud t 


Existing Connections 


▼ Details 


SmartCloud 


IBMCC Description Cp 


IBMCC Location * Cp 


Raleigh 


Proxy Server Host (p 


Proxy Server Port (p 


Proxy Server User Name ip 


Proxy Server Password (p 


Corjpect I 


Figure 5-6 Complete the Target details 
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7. Click Save. A message indicates that the save was successful (Figure 5-7). 


Cast Iron Design Console 


TSAM to IBM Compute Cloud 


Integrations Welcome back Administrator ~ 


Save Close 


Information 


Integration TSAM to IBM Compute Cl outT successfully 
saved. 


OK 


Figure 5-7 Save the integration 


8. Click Integrations. The new integration displays in the console window in a 
stopped state, as shown in Figure 5-8. To start the integration, click the play 
icon. To stop it, click the stop icon. To delete it, click the delete icon. 



Figure 5-8 Start the Integration 

5.2.3 Installing the Tivoli Service Automation Manager Hybrid Cloud 
Extension 

The provisioning of servers in a public cloud is managed by Tivoli Service 
Automation Manager and triggered by Tivoli Provisioning Manager workflows. 
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The installation of the service automation solution for hybrid cloud is a multistep 

process, as explained here: 

1 . Add custom Java code to the Tivoli Service Automation Manager to 
implement the operational workflow used by the solution. 

2. Add a Dojo GUI to extend the simple Tivoli Service Request Manager user 
interface. 

3. Install a new Tivoli Provisioning Manager driver that contains the Tivoli 
Provisioning Manager workflows. The Tivoli Provisioning Manager workflow 
implements the server provisioning and decommissioning, and the image 
discovery processes. 

4. Add new service definitions. Add the associated actions, operational 
workflows, job plans, and topology nodes. 

5. Create offerings and add them to the offerings catalogs. Add the associated 
classifications. 

6. Create escalation definitions to implement workload governance and 
management of servers that run in a hybrid cloud. 

Downloading the Hybrid Cloud extension software 

To download the Hybrid Cloud extension software, follow these steps: 

1 . Log on to the Integrated Service Management Library, and search for Hybrid 
Cloud. 

https : //www-304 . i bm.com/software/brandcatal og/i sml i brary/ 

2. When you locate the Service Management Extensions for Hybrid Cloud 
offering, click Download, as shown in Figure 5-9. 


hybrid cloud [X] 

Show details 2 results Sort by: Last Modified ▼ 

^ M; 

Results per page:1Q | 25 | 50 

Busines 

Integral 


Contenl 

===■=* Reviews: Provider: IBM 

W Info i Download Q Contact Provider 

IBM pro 
Industry 
Price 
Service 

CTERA Cloud Attached Storage 
Provider: CTERA NETWORKS LTD 


Figure 5-9 Download the Hybrid Cloud extension 
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3. Select the Service Management Extensions for Hybrid Cloud 7.2.1 , as 

shown in Figure 5-10. 


Download using Download Director 


Download using http 


] Select all flies 


Documentation: Service Management Extensions for Hybrid Cloud 7.2.1 

hybrid CI d ud721 0 Userlnsta llu u id e. pd f (1494KB) 


Service Management Extensions for Hybrid Cloud 7.2.1 
hy h rid C Id ud721 0 .ta r (1 631 20 KB ) 


Figure 5-10 Extensions selection 


To download the Tivoli Service Automation Manager Hybrid Cloud extension 
software: 

1 . Ensure that the Tivoli Service Automation Manager V7.2.1 .3 server is 
running. 

2. Log on to the Tivoli Service Automation Manager host as the root user. 

3. Transfer the hci Extension. tar file from the original media to the /tmp 
directory. Then, change to the /tmp directory: 

# cd /tmp 

4. Extract the contents of the hci Extension. tar file to create an hci directory 
that contains all the necessary files. 

# tar xvf hciExtension.tar 

5. Check that the files and folders shown in Figure 5-1 1 are available. 



Figure 5-11 Files unzipped 
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Installing the Tivoli Provisioning Manager driver 

To install the Tivoli Provisioning Manager driver, complete the following steps: 

1 . Log on to the Tivoli Service Automation Manager host as the root user. 

2. Change directory to the /tmp/hci directory: 

# cd /tmp/hci 

3. Run the i nstal 1 Extensi on . sh script: 

# . /i nstal 1 Extension. sh 

4. The i nstal 1 Extensi on . sh scri pt assumes the following default values: 

eWASLogin wasadmin 

eWasPasswd password 

eWebSphereHome /opt/IBM/WebSphere 

tmpHome /opt/IBM/Tivoli/tmp 

If the values are different in your system, use the appropriate command line 
arguments to pass the correct values. Use the ./install Extension.sh -h 
command to display the usage page. For example: 

# ./instal 1 Extension.sh -1 wasadmin -p mypassword -w /app/WebSphere 
-t /app/tpm 

A message displays if the installation completes successfully (Figure 5-12). 


HXServer is started 
Start TPM engines 
. . .waiting 
. . .waiting 

The lightweight runtime has started success fully. 

TPM startup completed. 

Check the following logs for startup errors: 

/ us r / i bon/ tivoli/comon/ COP/ logs / 1 io_s tar t . log 

/us r / i bm/ tivoli/ common/COP/ logs / tio_s tar t_service . log 

/op t / IBM/ tivoli/ 1 pm/ lwi / logs 

/opt / 3 BM/ WebSphere/ AppSer ver / profiles /c tgDmgr 01 / logs / dtmgr 
/opt/ IBM/ WebSphere/ App Server / profiles /ctgAppSrvOl / logs /nodeagent 
/opt / 3 BN/WebSpher e/ AppSer ver / profiles / ctgAppSrvOl / logs /MX Server 
/opt / IBM/Websphere/Appser ver /profiles /cas prof ile / logs/server 1 

Info: Installation completed successfully. 

vml 00: /tmp/hci S 1 


Figure 5-12 Extension Installation complete 

Importing the migration packages 

Next, you need to import the migration packages for Tivoli Service Automation 
Manager 7.2.1 Fix Pack 3. 
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Prerequisite steps 

Before you import the migration packages, complete the following steps: 

1 . Log on to the server where you run your web browser. Then, extract the 
following files from the migration_packages_tsam721.zip file from the 
/tmp/hci directory (Figure 5-13): 

- HCIArtifact-Base.zip 

- HCIArtifact-Additional.zip 


Name 

Da 

eonfig 

16, 

driver 

16 

itlm 

16 

jar 

16, 

js 

16 

tools 

16 

installExtension.sh 

07 

- Lj migration_packages_tsam721.zip 

07 


Figure 5-13 Extract the migration package 


2. Log on to IBM Maximo® Start Center as described in 5.3.6, “Logging in to the 
Maximo Start Center” on page 150. 

3. Check your version of Tivoli Service Automation Manager by clicking Help > 
System Information. The version displays as shown in Figure 5-14 on 
page 107. 


Important: You must use Tivoli Service Automation Manager V7.2.1 .3. 
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System Information 


App Server 

IBM WebSphere Application Sever 6.1 

User Name 
Version 

MAXADMIN 

Se vice Desk Integration ME A 7.2.0.00 BuikJ 2010 041 90 DB Build V7200-D3 
TPM PMP 7.2.0. 0-IF00001 BuikJ U3133_40-201 00810 DB BuikJ V720 1-05 
SRM Sevice Request Management 7.2. 0.1 BuikJ 2010031602 DB BuikJ V7201-01 
RDP PMP 7.2.1. 3 BuikJ 201 01217D DB BuikJ W24-06 

IBM Tivoli Change Management Content 7.2.0.00 Build 20091 11 ID DB BuikJ V72 00-1 4 

IM Bet SRM Sevice Desk 7.2.0.00 BuikJ 20100419D DB BuikJ V7200-03 

SRM Sevice Desk Content - Best Practices 7.2.0. 1 Build 2010031602 DB Build V7201-01 

Sevice Automation Manager - CCMDB Integration PMP 7.2.1. 2 BuikJ 201 01 21 7D DB Build V723-03 

SRM Sevice Desk Content- Classification 7.2. 0.0 Build 2010 041 9D DB Build V7200-05 

Sevice Automation Manager PMP 7.2. 1.3 BuikJ 201 01217D DB Build V724-05 

IBM Tivoli Common Process Components 7.2.0.01 BuikJ 201001090 DB BuikJ V7201-02 

Sevice Automation Manager Configuration PMP 7.2. 1.3 BuikJ 20101217DDB Build V724-04 

SRM Sevice Desk Content - Best Practice Users 7.2.0. 0 Build 201004190 DB Build V7200-05 

SRM Sevice Desk 72.0.1 BuikJ 2010031602 DB Build V7201-04 

SRM Screen Capturer 72.0.0 Build 201 00419D DB BuikJ V7200-02 

SRM Problem Management 7.2.0. 1 BuM 20 10031 602 DB Build V720 1-01 

SRM Solution 7.2.0. 1 BuikJ 201 0031 602 DB Build V7201-01 

SRM Incident Management 72.0.1 Build 201 0031602 DB Build V720 1-01 

SRM Sevice Catalog Base 7.20.1 BuikJ 201003160 DB BuikJ V7201-05 

SRM SLA Hold 7.20.1 BuikJ 2010031602 DB BuikJ V7201-03 

SRM Search 72.0.1 Build 2910031602 DB Build V7201-02 

Cl Reservation PMP 72.1.0 Build 20101217DDB BuikJ Wlle-31 

SRM Suvey Management 7.20.1 BuikJ 201 00316D2 DB Build V7201-01 

IBM Tivoli Ul Widgets 7.2.0.01 BuikJ 201002251643 DB Build V7201-02 

IBM Tivoli Change Management 7.20.01 BuikJ 201 0021 502 DB BuikJ V7201-02 

SeviceProvider 7.1 .1 .1 BuikJ BUILD DB BuikJ V7121-03 HFDB Build HF7121-01 

Sevice Automation Manager WAS PMP 7.21.0 Build 201Q0702D DB BuikJ V721-05 

SRM Sevice Catalog Content 72.0.1 Build 201003160 DB Build V7201-06 

Base Se vices 7.1. 1.6-LA201 00521-0603 BuikJ 2009120S-1415 DB BuikJ V71 16-173 HFDB Build HF71 16-06 

Sever OS 

Lin ux 2.6. 1 6.6 0-0 . 54. 5-3 mp 

License # 

(c) Copyright IBM Corp. 2007 

LS^yJ 

Figure 5-14 

Tivoli Service Automation Manager version 


Updating the CLASSUSEWITH domain 

To update the CLASSUSEWITH domain, complete the following steps: 

1 . Log on to Maximo Start Center. 

2. Click Go To > System Configuration > Platform Configuration > 
Domains. 
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3. In the Domain field in the Filter area, specify CLASSUSEWITH and press Enter. 
An entry displays in the table. 

4. Click Edit Detail icon to the left of the CLASSUSEWITH domain name. Then, 
in the Value field in the Filter area of the SYNONYM Domain window, specify 
PMSCCRSPEC and press Enter. If the PMSCCRSPEC entry exists, no further 
action is required. 

5. If the PMSCCRSPEC entry does not exist, create the entry as follows: 

a. Click New Row. 

b. Then, in the Internal Value field, specify TKTEMPLATE, and in the Value 
field, specify PMSCCRSPEC. Refer to Figure 5-15. 

c. In the Description field, specify Use with Specification display table. 

d. Click OK. Click the Save Domain icon. 



Figure 5- 15 CLASSUSEWITH domain 

Importing the base migration package 

To import the base migration package: 

1 . Log on to Maximo Start Center. 

2. Click Go To > System Configuration > Migration > Migration Manager. 
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3. Click Select Action > Upload Package. 



Figure 5-16 Upload package 

4. In the Upload Package window, select the following file in the /tmp/hci 
directory: 

HCIArti fact-Base.zi p 

5. To upload the file to the Tivoli Service Automation Manager server, click OK. 

6. Click Select Action > Deploy Package. 

7. In the Deploy Package dialog box, select the Do you have a current backup 
option. Then, click Deploy (Figure 5-17). 


Deploy Package 


? 

Please select a single package for deployment from the available packages. 


□ 

Preview? [~~ 


Do you have a current backup? jr 

Include Database Configuration Commands? — 



Rollback Point: Rollback everv record 


Deploy ] [ Close 


Figure 5-17 Deploy package 
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To confirm that the package deployed successfully, verify that you receive the 
messages shown in Figure 5-1 8 and Figure 5-1 9 on page 111. 


Please wait... 


Processing Complete... 


BMXAAJ0163I - [3/6/12 10:58:14] Successfully deployed configuration 
data for the pa ckage HCIArtifact-Base_dev- 
tsa m_M AXDB71 _M AXI MG_2Q 1 1 09 1 2002029 

B MXAA01 0 31 - [3/0/1 2 10:58:15] Pa ckage HCI Artifa ct-Base_dev- 
tsa m_MAXDB71 _MAXI MO_2G 1 1 09 1 2002029 deployed su coessf u I ly 


L^J 


Figure 5-18 Successful deployment 
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Figure 5-19 Package deployed 


8. Click Go To > Service Automation > Service Definitions. 
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9. Verify that the service definitions list contains the GENICC service definition, 
as shown in Figure 5-20. 



Figure 5-20 New service definition 

10. Select the GENICC service definition and then clicking the Management 
Plans tab. Verify that the following management plans are listed (Figure 5-21 
on page 113): 

- ADDSERVERICC 

- CAN PROJECT 

- DELSERVER 

- NEWICC 
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Figure 5-21 New management plan ICC 


1 1 .Click Go To > Planning > Job Plans. Verify that the job plans are listed as 
shown in Figure 5-22. 


ns 

Bulletins: id: 

GO TO Reports Start 








_ Z Find: 


(_^ ▼ Select Action ZB Q 6 



List | Job Plan , Work Assets > Specifications > Change Template 


Qj, Advanced Search 


| Save Query 


Job Plans : ^ Filter > 3 ij 1 - ^ : 1 - 4 of 4 


PMRDPPRICC 


O Select Records 


Description 

Duration Suoervisor 

Status 

Temolate Tvoe 0 ra a n izatio n 

,1 


l»l_ 

Q, QT 

Deploys IBM Compute Cloud Servers 

0:00 

ACTIVE 

ACTIVITY 

Destroys Deployed IBM Compute Cloud 
Servers 

0:00 

ACTIVE 

ACTTVTY 

Get Properties of Deployed IBM Compute 
Cloud 

0:00 

ACTIVE 

ACTIVITY 

Personalizes virtual server nodes for 
ICC Deployment 

0:00 

ACTIVE 

ACTIVITY 


< i: 


Figure 5-22 Job plan ICC 
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Importing the additional migration packages 

To import the HCIArtifact-Additional .zip migration package, follow these 
steps: 

1 . Log on to Maximo Start Center. 

2. Click Go To > System Configuration > Migration > Migration Manager. 

3. Click Select Action > Upload Package. 

4. In the Upload Package window, select the following file in the /tmp directory: 
HCIArtifact-Additional .zip 

5. To upload the file to the Tivoli Service Automation Manager server, click OK. 

6. Click Select Action > Deploy Package. 

7. In the Deploy Package dialog box, select the Do you have a current backup 
option. Then, click Deploy as shown in Figure 5-23. 


Deploy Package 

?£ Please select a single package for deployment from the available packages. 
Preview? ~ 

Include Database Configuration Commands? 

Ro lib a ck Po int: r d nt a c |* every reco rd 



| Deploy | | Close | 

Figure 5-23 Deploy Additional Package 
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To confirm that the package deployed successfully, verify that you receive the 
message shown in Figure 5-24. 


Please wait... 


Proce s s i ng Co m p lete . . . 


B MXAAfl 1 6 31 -[3/9M 2 20:34:41] Successfu I ly deployed configuration 
data for the package HCI Artifa ct-Add itiona l_dev- 
tsa m_M AXDB71 _M AXI MO_20 11090101 2730, 

BMXAAS1S3I - [3/S/1 2 20:34:41] Package HCI Artifact-Add itiona l_dev- 
ba m_MAXDB71 _MAXI MO_20 11090101 2730 deployed su coessf u I ly 


OK 


Figure 5-24 Successful additional deployment 

Perform the following steps to verify the Additional migration package 
installation: 

1 . Click Go To > Administration > Classifications. Verify that the 
classifications list includes the classifications shown in Figure 5-25. 



Figure 5-25 Classifications 
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2. Click Go To > System Configuration > Platform Configuration > Actions. 

Verify that the actions list includes the actions shown in Figure 5-26. 



Advanced Search ▼ ij Save Query ▼ y BDDtmarlca 


Actions \7 Filter > 1 - 5 of 5 


Action 

Description 

Ohj 



ICC 


b 

PMIRDPPPICC 

1C C Pro pa re i n p ut fo r de p loyme nt 

PM 




ICC Personalize virtual server node for 
Deployment 


PMRDPPRICC 

pm; 

PMRDPICCCP 

Scheduling extension for ICC Deployments 

SR 

PMRDPASVRICC 

Add ICC server to project 

SR 

PMRDPDSVRICC 

Delete ICC Server 

SR 


Select Reuuid i 


Figure 5-26 Actions 
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3. Click Go To > System Configuration > Platform Configuration > 
Workflow Designer. Verify that the workflow list includes the workflow 
processes shown in Figure 5-27. 



Figure 5-27 Workflows processes 

4. Click Go To > Service Request Manager Catalog > Offerings. Verify that 
the offerings list includes the offerings shown in Table 5-1 . 

Table 5-1 Offerings 


Offering 

Description 

PMRDP_0751 B 

Create Project with IBM Compute Cloud Servers 

PMRDP_0752B 

Add IBM Compute Cloud Server 

PMRDP_0802B 

Create Project with Hybrid Servers 


Modifying the service definitions 

Now you need to modify the service definitions that were installed as part of the 
Tivoli Service Automation Manager Hybrid Cloud Extension: 

1 . Log on to Maximo Start Center. 

2. Click Go to > Service Automation > Service Definitions. 

3. In the Service Definition ID field in the Filter area, specify GENICC and press 
Enter. An entry displays in the table. 

4. Select the GENICC entry to open the service definition. 
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5. Click the Management Plans tab and select NEWICC (Figure 5-28). 







Figure 5-28 GENICC Management Plan 
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6. In the Management Plan Details area, select the initial option (as shown in 
Figure 5-29. Then click Save. 



Figure 5-29 Initial option 

Modifying the offerings 

Next, update the offerings that were installed as part of the Tivoli Service 
Automation Manager Hybrid Cloud Extension, and add them to the relevant 
catalogs: 

1 . Log on to Maximo Start Center. 

2. Click Go to > Service Request Manager Catalog > Offerings. 

3. In the Offering field in the Filter area, specify PMRDP_0751B and press Enter. 

4. Select the PMRDP_0751 B entry to open the offering definition. 

5. From the Select Action list above the tabs, select Change Status. 
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6. From the New Status list in the Change Status window, select Pending 
(Figure 5-30), and then click OK. 


Change Status 


Item: PMRDP_0751B Create Project with IBM Compute Cloud Servers J 


Status: ACTIVE 


+ New Status: 


Roll New Status to Organizations? 


Pending 




Pentmg Obsolescence 


Memo: 


Planning 



| OK | | Cancel | 

Figure 5-30 Change status 

7. From the Select Action list above the tabs, select Add Offering to catalog, 
as shown in Figure 5-31 . 



Figure 5-31 Add Offering to Catalog 
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8. In the Add To Catalog window, click Add to Catalog. Then, in the empty row, 
click the Detail Menu icon (Figure 5-32). 


Add To Catalog 



Ueta " M£nu I [~OK~| |~EanceT | Add to Catalog 

Figure 5-32 Detail Menu 

9. Click Select a Value. In the Select Value window, select 
PMRDPCLOUDADMCAT_72. Then, repeat steps 8 - 1 1 to add the offering 
to the PMRDPTEAMADMCAT_72 catalog. Then, click OK. The offering is 
added to the two catalogs. 

10. In the Service Request Information pane in the Offerings window, select the 

Automatic Line Manager Approval option (Figure 5-33). 



Figure 5-33 Automatic Line Manager Approval 

1 1 .From the Select Action list above the tabs, select Change Status. Then, 
change the status of the offering to Active, and click OK. The offering is 
configured. 

12. Repeat steps 2 - 17 to configure the following offerings: 

- PMRDP_0752B: Add IBM Compute Cloud Server 

- PMRDP_0802B: Create Project with Hybrid Servers 
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Activating operational workflows 

Now enable and activate the operational workflows that were installed as part of 
the Tivoli Service Automation Manager Hybrid Cloud Extension: 

1 . Log on to Maximo Start Center. 

2. Click Go To > System Configuration > Platform Configuration > 
Workflow Designer. 

3. In the Process field in the Filter area, specify ICC and press Enter. 

4. Select the PMRDPICCCP entry to open the workflow definition. 

5. From the Select Action list above the tabs (Figure 5-34), select Enable 
Process. 



Figure 5-34 Enable Process 

6. Click the Canvas tab, and verify that the Enabled check box selected. 

7. From the Select Action list above the tabs, select Activate Process. 

8. In the Canvas tab, verify that the Active option is selected. 

9. Click the List tab. 

10. Repeat steps 4 - 8 for the following workflows: 

- PMRDPPPICC 

- PMRDPPRICC 
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5.2.4 Configure Tivoli Service Automation Manager for a hybrid cloud 

You need to update Tivoli Service Automation Manager to enable 
communication with the IBM SmartCloud Enterprise cloud through the 
WebSphere Cast Iron Appliance. 

The provisioning of servers in a public cloud is managed by Tivoli Service 
Automation Manager and triggered by Tivoli Provisioning Manager workflows. 
The WebSphere Cast Iron Appliance provides the interface between the 
enterprise and the public cloud. 

Configuring the service automation solution for hybrid cloud is a multistep 
process: 

► Creating provisioning servers 

The provisioning servers store the following information: 

- Information about the environment, such as the WebSphere Cast Iron 
Appliance 

- Information about the public cloud, such as user names and passwords 
and access keys. 

► Creating and enabling cloud pools 

A cloud pool is a representation of a cloud, either a private cloud such as 
VMware, or a public cloud such as IBM SmartCloud Enterprise 

► Creating and registering images 

The Tivoli Service Automation Manager images are the representation of real 
images in the public cloud and are used for provisioning 

Creating provisioning servers 

The provisioning servers are defined in the DCM_objects.xml file. A sample 
DCM_objects.xml file is provided in the /tmp/hci/config directory when you 
extract the hci Extension. tar file. 


Locate on same system: The DCM_objects.xml file must be located on the 
same system as the web browser. 

To configure the provisioning servers, follow these steps: 

1. Edit the DCM_objects. xml file. 

2. Import the DCM_object.xml file into Tivoli Service Automation Manager. 

3. Verify that the provisioning servers are created correctly. 

4. Verify that the device drivers are created correctly. 
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5. Verifying that the image discovery configurations are created correctly. 

Editing the DCM_objects.xml file 

To edit the DCM_objects.xml file, complete the following steps: 

1. Open the DCM_objects.xml file in a text editor. 

2. Configure the IBM SmartCloud Enterprise account information by editing the 
i ccl . i bm.com server entry as follows: 

a. Specify the endpoint name to connect to the IBM SmartCloud Enterprise 
cloud. The default value is IBMCCRAL. 

Note: This is the name you fill in Figure 5-5 on page 100. 

<property component="KANAHA" name="name" val ue="IBMCCRAL" /> 

b. Specify the name of a security key that is defined in the IBM SmartCloud 
Enterprise. 

<property component="KANAHA" name=" keyname" val ue="devkey" /> 

c. Specify the user name and password to access the IBM SmartCloud 
Enterprise account. 

<sap name="csb" protocol -type="unknown" app- protocol ="UNKN0WN" 
context=" NOCONTEXT" port="0" auth-compul sory="fal se" role="host"> 

<credential s search-key="csb" is-default="false"> 
<password-credenti al s username="yourNameHere" 
password="yourPasswordHere" i s-encrypted="fal se" /> 

</credential s> 

</sap> 

3. Configure the WebSphere Cast Iron Appliance information by editing the 
hci .appl iance server entry as follows: 

a. Specify the WebSphere Cast Iron Appliance host name. 

<property component="KANAHA" name=" hostname" value="" /> 

b. Specify the port number to connect to the WebSphere Cast Iron 
Appliance. 

<property component="KANAHA" name="port" value="8088" /> 

4. Save and close the DCM_objects.xml file. 
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Importing the DCM_object.xml file into Tivoli Service Automation 
Manager 

To import the DCM_object.xml file into Tivoli Service Automation Manager, 
complete the following steps: 

1 . Log on to Maximo Start Center. 

2. Click Go To > Service Automation > Cloud Pool Administration. 

3. Click Import DCM Objects. 

4. In the Select Input File window, click Browse to find the DCM_object.xml file 
that you modified in the earlier steps, and then click Open. 

5. Click OK to import the Data Center Model objects. A message indicates that 
the import completed successfully (Figure 5-35). 



Figure 5-35 Import successful 

Verify that the provisioning servers are created correctly 

To verify that the import completed successfully and that the provisioning servers 
were created correctly: 

1 . Log on to Maximo Start Center. 

2. Click Go To > IT Infrastructure > Provisioning Inventory > Provisioning 
Computers. 

3. In the Computer field in the Filter area, specify iccl.ibm.com and press Enter. 

4. Select the iccl .ibm.com entry. 

5. Click the Variables tab, and verify that the information is correct. 

6. Repeat steps 2 - 5 to verify the hci . appl i ance entries. 

7. Click Go To > Administration > Provisioning > Resource Pools. 
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8. Verify that the IBM Compute Cloud Resource Pool is listed as shown in 
Figure 5-36. 



Figure 5-36 ICC1 computer 

Figure 5-37shows the HCI computer. 



Figure 5-37 HCI computer 
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Verifying that the device drivers are created correctly 

To verify that the device drivers were created correctly, follow these steps: 

1 . Log on to Maximo Start Center. 

2. Click Go To > Administration > Provisioning > Device Drivers. 

3. Verify that the IBM Compute Cloud Discovery Device Driver is listed, as 
shown in Figure 5-38. 



Figure 5-38 Device driver 

Verifying that the image discovery configurations are created 
correctly 

To verify that the image discovery configurations were created correctly: 

1 . Log on to Maximo Start Center. 

2. Click Go To > Discovery > Provisioning Discovery > Discovery 
configurations. 
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3. Verify that the IBM Compute Cloud Image Discovery configuration is listed, as 
shown in Figure 5-39. 



Figure 5-39 Discovery configuration 

Creating and enabling cloud pools 

The cloud pools are defined in the vrpool .properties file. 

Tip: The vrpool .properties file must be located on the same system as the 
web browser. 


A sample vrpool . properti es file is provided in the /tmp/hci /conf i g directory 
when you expand the he i Extensi on . tar file. 


Upgrade systems information: You do not need to import the 

vrpool .properties file for an upgrade system. Proceed to step 6 to set the 

Resource Pool fields. 


To import the vrpool .properties file into Tivoli Service Automation Manager: 

1 . Log on to Maximo Start Center. 

2. Click Go To > Service Automation > Cloud Pool Administration. 

3. Click the Filter Table icon, next to Filter, to display all the resource pools 
available. Make sure you do not specify any filter. If no resource pools are 
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displayed, proceed to step 4. If there are resource pools displayed, complete 
the following steps: 

a. Record the number of resource pools available and also record the Order 
number of the last resource pool (n). In this example, it is number 5. 



Figure 5-40 Existing cloud pool 

b. Edit the vrpool . properti es file. Change the 0 that precedes all Amazon 
EC2 Resource Pool entries to one more (n+1) than the order number of 
the last resource pool. Change the 1 that precedes all IBM Compute Cloud 
Resource pool entries to two more (n+2) than the order number of the last 
resource pool. 

c. Save the vrpool .properties file. 
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4. Click Import Virtual Resource Pools. In the Select Input File window, click 
Browse to find the vrpool .properties file, and then click OK. A message 
indicates that the import completed successfully (Figure 5-41). 


Q System Message 


CTJZH2Q11I- Cloud pool properties file vrpool. properties loading 
succeeded. Number of pools loaded: 2. The following pools were loaded: 

Amazon EC2 Resource Pool 
IBM Compute Cloud Resource Pool 


Figure 5-4 1 Import virtual resource pools 

5. Verify that IBM Compute Cloud Resource Pool is listed, as shown in 
Figure 5-42. 



Figure 5-42 New resource pool 
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6. Select IBM Compute Cloud Resource Pool and set the following fields: 

Resource Pool IBM Compute Cloud Resource Pool 

Target Computer iccl.ibm.com 

Image Directory / 

Image Repository Host iccl.ibm.com 

7. Then, click Create New Saved Image Repository and specify the following 
fields: 

Repository Name IBMCloudRepository 

Target System iccl.ibm.com 

Saved Image Location / 

8. Set the Saved Image Repository and Instance Image Repository field to the 
newly created repository name (for example: IBMCloudRepository). Then, 
click Save to save the cloud pool details. 

9. Finally, click Validate and Enable Cloud Pool. 

Creating and registering images 

To provision servers in a public cloud, you define a software stack to represent a 
“real” image in the cloud. Each software stack must be associated with a master 
image that is then registered to a cloud pool. 

When you create a project, or add a server to an existing project, you select a 
registered image that references an image that is defined in the public cloud. 

The Image Discovery automatically discovers images that are available in the 
public cloud and creates corresponding software stacks. 


Provide a filter condition: Because the discovery can potentially return 
hundreds of images, it is mandatory to provide a filter condition to narrow the 
search to the images that you need. 


The example in this section refers to the Red Hat Enterprise Linux 6 
(32-bit)(RTP) with the ID 20025200 and the Red Hat Enterprise Linux 6 
(64-bit)(RTP) with the ID 20025206. 

Defining a filter for IBM Compute Cloud Image Discovery 

To define a filter, you need to edit the Discovery configuration for the IBM 
Compute Cloud: 

1 . Click Go To > Discovery > Provisioning Discovery > Discovery 
configurations. 
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2. Enter IBM Compute Cloud Image Di scovery in the Discovery configurations 
field. Click IBM Compute Cloud Image Discovery to open and edit the 
parameters. 

3. Enter the filter that you want to apply to the images. 


Filter string: A filter is a string. Criteria are defined between square 
brackets ( [ ] ) and separated by the ampersand (&) character. 


The following attributes are supported: 

► IMAGEJD 

► IMAGE_NAME 

► DESCRIPTION 

► VISIBILITY (for IBM Compute Cloud, values are “PUBLIC” or “PRIVATE”). 

► OWNER 

► ARCHITECTURE 

► PLATFORM 

For example: 

► To get the private images owned by a person named “Steve”, you can add the 
owner to the filter [VISIBILITY=PRIVATE]&[OWNER=’steve’]. 

► To specify the exact list of images you want the discovery process to discover 
and add to the Tivoli Service Automation Manager database, set the attribute 
IMAGEJD with a comma-separated list of IDs [IMAGE_ID= 
20025200,20025206]. 

Images to avoid: Do not use any Windows operating system images. 

Those image types are not supported. 

4. Specify the maximum number of images that you want the discovery to import 
into Tivoli Service Automation Manager. The default value is 10. 

5. Save the configuration. 

6. Click Run Discovery. The Run Discovery window opens. In the Selected 
Targets panel, click Select and choose Computers. 

7. Select icd.ibm.com and click OK. 

8. Click Submit to start the discovery process 
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After the discovery is completed successfully, the software stacks that represent 
the discovery images are available in Tivoli Service Automation Manager, as 
shown in Figure 5-43. 



Figure 5-43 Discovery successful 

Verifying that the software stacks are created correctly 
To verify that the software stacks were created correctly: 

1 . Click Go To > IT Infrastructure > Software Catalog > Software Stacks. 
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2. Verify that the filtered software stacks are listed as shown in Figure 5-44. 


Softwa re stacks Bulletins: (-0) ^7 Go To Reports Start Center Profile Sign Out Help 


Find: ( ^ ; w Select Action 


; Software Stack 

1 Targets . 

Credentials . 

Workflows 

Variables 


' - L Advanced Search ^ j Save Query ^ w Bookmarks 


Software Stacks Filter > Q, 

| 

1-11 of 1 1 


Software Stack 


Version 

Vendor 

II 1 1 



AWS Pool Stack 

AMAZON 

CDS Depot Stack 


7.2. 0.0 

IBM 

Cloud Lab Base Aaent V2.1 BYQL 


unknown 

IBM 

ESXPo olStack 



IBM 

ICCPoolStack 



IBM 

Red Hat Enterprise Linux 6 f^-bitlfRTPl 


unknown 

IBM 

Red Hat Enterprise Linux 6 f64-bitffRTPi 


unknown 

IBM 

Tivoli Common Aaent Stack 


7.2. 0.0 

IBM 

Tivoli Common Aaent Stack Version 7.2.0. 0 

7.2.0 .1) 

IBM 

Tivoli Common Aaent and CDS Depot Stack Version 7.2. 0.0 7.2. 0.0 

IBM 

VMware Template — slesll vsOI 


unknown 

VMware 


Figure 5-44 Verify software stacks 


Creating a master image 

Next, create a master image for the software stack: 

1 . Click Go To > IT Infrastructure > Image Library > Master Images. 

2. Click the Add Master Image icon. 

3. Go to the Master Image tab. Then, specify the following information: 

- In the Master Image field, specify the real image name, for example Red 
Hat Enterprise Linux 6 (32-bit)(RTP). 

- In the Description field, specify the real image name, for example, Red 
Hat Enterprise Linux 6 (32-bit)(RTP). 

- In the Version field, specify 2.1. 

- In the Software Stack field, specify the real image name, for example, 
Red Hat Enterprise Linux 6 (32-bit)(RTP). 
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4. Click the Save icon to save the master image (Figure 5-45). 



Figure 5-45 Create the master image 

Registering the master images with the cloud pools 

Register the new master images with the cloud pools to make the images 
available for selection in the Tivoli Service Automation Manager Self-Service 
user interface: 

1 . Log on to Tivoli Service Automation Manager as described in 5.3.5, “Logging 
in to the Tivoli Service Automation Manager” on page 150. 

2. Click Request a New Service > Virtual Server Management > Manage 
Image Library. 

3. Register the master images as follows (Figure 5-46 on page 136): 

a. Click Register KVM Image. 

b. In the Name of Virtual Server Image field, specify Red Hat Enterpri se 
Linux 6 (32-bit) (RTP) for IBM SmartCloud Enterprise. 

This value is displayed in the Create Project interface and the Add Server 
interface. For consistency and ease of deployment, specify the name of 
the real image to avoid confusion. 

c. From the Resource Pool list, select IBM Compute Cloud Resource Pool. 

d. From the Discovered Image list, select the associated master image. 
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Image requirements: The selected master image must be associated 
with a real image. The real image must be available in the selected 
cloud pool, and must be accessible by the account specified by the 
resource cloud. 



Figure 5-46 Registering the master image 
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4. Click OK. When the registration is complete, the request is marked as 
Resolved in the My Requests pane, as shown in Figure 5-47. 


My Requests 



B Resolved (IS) [_] Failed (2) Total (20) 

Recent Activity 

Create Project with IBM Compute Cloud Servers HCI Resolved 


R es o I v e d 
Resolved 

Create Project with IBM Compute Cloud Servers HCI Failed 
Proj e ct 

Create Project with IBM Compute Cloud Servers HCI Failed 
Proj e ct 

Show all r eq oests Manage Req uests. . . 

Figure 5-47 Registering successfully 


Protect 

Register KVM Image Red Hat Enterprise Linux S 
f.32-bit)(RTP) 

Register KVM Image Red Hat Enterprise Linux S 
(64-bit)(RTP) 


Creating a team to manage server provisioning 

To create a team to manage server provisioning: 

1 . Log on to Tivoli Service Automation Manager. 

2. Click Request a New Service -> Virtual Server Management -> Manage 
Users and Groups. Then, follow these steps: 

a. Click Create Team. 

b. In the Name field, specify the name of the team. 

c. From the Available Users list, select a user and add the user to the 
Selected Users list, as shown in Figure 5-48 on page 138. Repeat this 
step until all team members are added. 

d. Click OK. 
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Figure 5-48 Create a Team 


When the team is created, the request is marked as Resol ved in the My 
Requests pane. 


5.3 Scenario usage 

The project manager of IBM Redbooks Stores in our scenario had to create new 
features in applications to support the new stores. The project manager 
completed the functional tests described in this section to provision servers on 
the IBM SmartCloud Enterprise. 
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5.3.1 Creating a project with servers in the IBM SmartCloud 
Enterprise 

To create a new project with one server on the SmartCloud Enterprise Cloud and 
to create the initial project, follow these steps: 

1 . Log on to Tivoli Service Automation Manager. 

2. From the Tivoli Service Automation Manager self - service user interface, click 

Request a New Service -> Virtual Server Management. 

3. Click Create Project with IBM Compute Cloud Servers as shown in 
Figure 5-49. 



Figure 5-49 SmartCloud Provisioning Service 

4. In the Create Project with IBM Compute Cloud Servers dialog box, shown in 
Figure 5-50 on page 140, complete the following mandatory details: 

- Enter a Project Name and Project Description 

- Select a Team to Grant Access to the project 

5. Select IBM Compute Cloud Resource Pool from the Resource Group 
Used to Reserve Resources drop-down menu. 

6. Select an image to be deployed. 
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7. Select an instance from the Select an Instance Type drop-down menu. 

8. Choose the number of servers to be provisioned. 

9. Click OK to submit the request. 
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The project manager receives an email when the request is in the queue, as 
shown in Figure 5-51. 


IQ New T ^ Reply T ^ Reply to All T ^ Forward T B T [[> T fj Displays O T More T 

Maximo Service Request has been accepted 

root@localhost to: Loic Marsollier 14/03/2012 13:29 

Default custom expiration date: 14/03/2013 Show Details 


Dear Loic Marsollier 

Your Service Request 1029 'Create Project with IBM Compute Cloud Servers ITSO 
Redbook Project' has been (auto-) approved and QUEUED for processing. 


Please do not reply to this message as it was automatically generated. 

Regards f 

Your Service Automation Team 

Figure 5-51 Request approved and in the queue 

The status of the request is displayed on the My Request panel on the right side 
of the user interface. The project is created successfully. One or more servers 
are provisioned and are running in the IBM Compute Cloud when the status 
displays as Resolved, as shown in Figure 5-52. 



My Requests 



Q Resolved l[lB) Qj Failed [2) Total (20) 

Re ce nt Activity 



Create Project with IBM Compute Cloud Servers HCI 
Protect 

Resolved 


Register KVM Image Red Hat Enterprise Linux 6 
(32-bit)(RTP) 

Resolved 


Register KVM Image Red Hat Enterprise Linux S 
(64-bit)[RTP) 

Resolved 


Create Project with IBM Compute Cloud Servers HCI 
Proj e ct 

Failed 


Create Project with IBM Compute Cloud Severs HCI 
Project 

Failed 

Stow al req aests Manage Req oests. . . 


Figure 5-52 My Requests panel 
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The project manager can view the project status from the My Projects panel on 
the right side of the user interface. The project manager receives an email with 
the connection details, as shown in Figure 5-53. 


f] New''' ^1 Reply’ - ■5^3 Reply to All ’ Ei(>. Forward ’ IjmI ’ ’ Q Display’ - Q’ More’ 



Your request to start a new Project has been processed 

rooMsNocalhost to: Loic Marsollier 
Cc: cloudadmin. testadmin, testuser 
Default custom expiration date: 14/03/2013 


14/03/2012 13:47 
Show Details 


Dear Loic Marsollier 


You have started a new Project ITSC Redbook: Project with the following 
topology: 


ffisi 


T J T i”tual SeprcT 1 has been added w ith the ^a ll e^ing parameters: 
Hostname of Server: vhost0414.sitel.compute.ihost.com 


Numli e ^ ul GPU ( s ) . 1 

Number of tenths of physical CPUs: 

Amount of Memory: 204S MB 

Swap Size : 0 GB 

Disk: Space Size: 60 SB 

Admin Password: 


The users of group HCITEAM have been notified. 
Regards, 

Your Service Automation Team 


Figure 5-53 SmartCloud Enterprise server ready 
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The first time that the Project Manager goes to the SCE Site, the new server is 
running and shows as Active (Figure 5-54): 

https : //www. i bm. com/cl oud/ enterpri se 


Welcome Loic Marsollier | Sign out 

IBM SmartCloud 

Enterprise 


Overview 

1 Control panel 

I Account 

Support 


Instances Images 

Storage Service Instances 



View asset catalog ^ 


My instances 

Filter ag name | Q 

Current filters: 


Add instance 


O You are currently using 2 of 4 available instances 


Instance name £ 

IP Address ^ 

Created on £ 

Runnina $ 

Data center 

Total Price/ur 

Status w 

Andre 

170.225.100.145 

March 7, 2012 

8 Days 

Boulderl, U.S.A 

50.125/ UHR 

Active 


Workload VM 

170.224.161.159 

March 14, 2012 

1 Hour 

Raleigh, U.S.A 

S0.125/UHR 

Active 



Figure 5-54 Server provisioned from Tivoli Service Automation Manager 
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You can click the project to view its content. You can modify the project when the 
project status is Operational , as shown in Figure 5-55. 



Figure 5-55 ITSO Redbooks Project Details panel 
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To use this new Linux server, the project manager had to use a client, such as 
Putty, and the default security certificate that was used when creating the server 
(Figure 5-56). 


My instances 
Filter 


Current filters: 

Instance name J 
Andre 


IP Address # Created on # Running 


Workload VM 


170.225.100.145 


March 7, 2012 


a Days 


170.224.101 .1 59 March 14, 2012 2 Hours 


Workload VM [ Change name ] 


Instance id : 205002 
OS : Red Hat Enterprise Linux v6 
IP: 170.224.161159 
Secondary N/A 

Server configuration : Copper - 32 bitfyCPU: 1, RAM: 2 GiB, 


Data center 
Boulderl, U.S.A 

Raleigh, U.S.A 


Logs : 

View logs 

Security key pairs : 

Instructions 


0 Reboot instance Q 


Instance tags 


Figure 5-56 Security instructions 


5.3.2 Adding one or multiple servers to a project 

After a period of time, the first server was not enough to ensure quality tests for 
the IBM Redbooks Stores. The project manager decided to add a new and larger 
server to its existing project. 

To modify an existing project, follow these steps: 

1 . From the Tivoli Service Automation Manager self-service user interface, click 

Request a New Service -> Virtual Server Management. 

2. Click Modify Project. 

3. Click Add IBM Compute Cloud Server to provision servers on the IBM 
Compute Cloud. 
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4. Select a project from the drop-down list. Only projects with the status as 
Operational are listed. 

5. Select a Resource Pool, an Image, and an Instance Type, and the number of 
servers to be provisioned. 

6. Click OK to submit the request. 

Refer to Figure 5-57. 



Figure 5-57 Add servers details panel 


The status of the request is displayed on the My Request panel on the right side 
of the user interface. One or more servers are provisioned and running in the 
IBM Compute Cloud when the status displays Resolved. 
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5.3.3 Removing a server from a project 

When the quality tests were finished, the second server was no longer required. 
To save money, the project manager decided to release this server on the IBM 
SmartCloud Enterprise. 

To remove a server from a project: 

1 . From the Tivoli Service Automation Manager self-service user interface, click 

Request a New Service -> Virtual Server Management -> Modify Project. 

2. Click Remove Server. Select the project from the drop-down list. Only 
projects with the status Operati onal are listed. 

3. Select the server from the list of servers of the project (Figure 5-58), and click 
OK to submit the request. 



Figure 5-58 Remove Server Details panel 
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The status of the request displays on the My Request panel on the right side of 
the user interface. One or more servers is removed from the IBM Compute Cloud 
cloud when the status displays Resolved. 


Removing the last server: You cannot remove a server from a project that 
contains only one server, as shown in Figure 5-59. To remove the last server 
in a project, cancel the project as described in 5.3.4, “Cancelling a project” on 
page 149. 



Figure 5-59 Last server 
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5.3.4 Cancelling a project 

After the development team qualified the new features of applications, the project 
manager decided to delete the project environment on the IBM SmartCloud 
Enterprise. 

To cancel a project, follow these steps: 

1 . From the Tivoli Service Automation Manager self-service user interface, click 

Request a New Service -> Virtual Server Management. 

2. Click Cancel Project. Select the project to be cancelled from the drop-down 
list (Figure 5-60). 

3. Click OK to submit the request. 



Figure 5-60 Cancel the project 

The status of the request is displayed on the My Request panel on the right side 
of the user interface. All servers are removed from the IBM SmartCloud 
Enterprise when the status displays as Resolved. 

From the My Projects panel on the right side of the user interface, the project 
status is updated to Decommissioned. 
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5.3.5 Logging in to the Tivoli Service Automation Manager 


To login to the Tivoli Service Automation Manager self-service user interface: 

1 . Open the Tivoli Service Automation Manager self-service user interface: 
https : //hostname: 9443/Si mpl eSRM/1 ogin. jsp 

2. Log in as the Tivoli Service Automation Manager user. The default user name 
is PMRDPCAUSR and the default password is maxadmin. 


Browser configuration: Your browser must be configured to accept 
cookies. Otherwise, you will not see any action. 


5.3.6 Logging in to the Maximo Start Center 

To login to the Maximo-Administrative user interface: 

1 . Open the Maximo-Administrative user interface: 
https : //hostname : 9443/maxi mo/ui /I ogi n 

2. Log in as the Maximo admin user. The default user name is maxadmi n and the 
default password is password. 


5.4 Lessons learned 

When considering this type of scenario, keep in mind the following points: 

► The Tivoli Service Automation Manager version must be 7.2.1 .3 instead of 
7.2. 1.4 as written in the HCI extension documentation. 

► In the Cast Iron Integration, the source name must be identical in the 
DCM_object.xml file, for example, IBMCCRAL. 

► You must have a SmartCloud valid user ID with the ability to create instances. 


5.5 Summary 

The IBM Redbooks Stores company realized the following business benefits and 
cost savings of the hybrid provisioning implementation: 

► One learning curve 

► One user interface 
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► One maintenance point 

► A unique services catalog 

IBM Redbooks Stores also realized an improvement in the time to value of its 
acquisition without increasing its capital expenses by using, on demand, the IBM 
SmartCloud Enterprise resources and private Cloud Computing Platform. 

The development team increased its efficiency with application upgrades and 
integration in the common applications set. The quick time to market gave IBM 
Redbooks Stores a competitive benefit over its competitors and made this 
acquisition more successful. 
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Directory Synchronization 
scenario 


In this chapter we continue the IBM Redbooks Store scenario introduced in 
Chapter 2, “Integrating cloud solutions with Cast Iron” on page 15. Here we detail 
the directory synchronization portion of that scenario (2.9.3, “Directory 
Synchronization” on page 37). 

In the scenario, the company hires additional people during three months of the 
year, requiring synchronization of their on-premise user directory with the cloud 
user directory. 

In this chapter we discuss the following topics: 

► Scenario overview 

► Implementing the directory synchronization 

► Running and testing the scenario 

► How the integration works 

► Lessons learned 

► Summary 


© Copyright IBM Corp. 2012. All rights reserved. 


153 




6.1 Scenario overview 


In this chapter we show how to synchronize an enterprise Tivoli Directory Server 
to the public LotusLive. The objective of this scenario is to provide the ability to 
synchronize user directories from an existing standard enterprise directory 
service, such as an LDAP server or a compatible directory server like Tivoli 
Directory Server to a supported public cloud service provider. The result is that 
on-premise users can access the applications or services both on premise and 
deployed in the public clouds using on-premise enterprise directories. 

Figure 6-1 shows the relationship between all the components across the 
on-premise and public cloud service provider LotusLive. 


"On-Premise" Data Center Public Cloud - 

and private clouds Hybrid Cloud Connectivity Infrastructure and Applications 



IBM Value : Client can leverage Lotus Live quickly using the same TDI user registry synchronization 
solution as those on premise. 

Figure 6- 1 IBM Hybrid Cloud integration solution - Directory Synchronization 

As previously mentioned, the IBM Redbooks Store has acquired another retail 
company. After the acquisition the store leveraged a hybrid cloud model to obtain 
the additional capacity needed for its busy season. During this season, the store 
will also hire additional staff. Getting the newly hired workers up and running in 
short period of time requires the provisioning of these additional users in both the 
on-premise systems and the cloud messaging system. 

IBM Redbooks Store uses Lotus Live as the email system for the temporary staff 
and needs to synchronize its internal LDAP directory, with the temporary staff 
users, to LotusLive. This synchronization is achieved using the Directory 
Synchronization bundle installed on the existing Cast Iron appliance and 
integrating it to the Lotus Live system on the cloud. 
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In this scenario, the source is an internal LDAP-based server and the target is 
LotusLive. Both servers are external to the Cast Iron server. Groups and 
members are defined on the LDAP server. 

The general flow of the synchronization process is to take group members from 
LDAP and add or delete them as subscribers from the LotusLive account. After 
the members have been added to LotusLive, the new subscribers will receive 
welcome mail from LotusLive with a URL to set up their new LotusLive account 
password and other personal details. 

Subsequent changes and modifications to member details in the LDAP directory, 
such as address and phone number, will be synchronized to the LotusLive 
address book. When a member is removed from an LDAP group, the 
corresponding user account is also deleted from LotusLive along with any 
information that is associated with that user. 

There are basically two updates going on in the background of LotusLive. One is 
the update of the address book. The other is the addition and deletion of 
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accounts under a particular customer of LotusLive. A process flow chart is shown 
in Figure 6-2. 



6.2 Implementing the directory synchronization 

This section describes how to set up the directory synchronization between the 
on-premise and cloud directories. It does not cover the full installation of the 
products. Only the installation steps that are relevant for the scenario are 
explained. 

The IBM products that are used in this scenario include: 

► IBM Service Delivery Manager 

► Tivoli Service Automation Manager 

► IBM Service Management Extensions for Hybrid Cloud 7.2.1 
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The Service Management Extensions are available at no cost from the IBM Tivoli 
Software product library. You can download the Service Management 
Extensions for Hybrid Cloud at the IBM Tivoli Integrated Service Management 
Library at the following URL: 

https : //www-304 . i bm.com/software/brandcatal og/i sml i brary/detai 1 s?catal o 
g. 1 abel =1TW10TS0D 

6.2.1 Install Service Management Extensions for Hybrid Cloud 
plug-ins 

In this section, we illustrate and explain in detail the steps needed to install the 
Service Management Extensions for Hybrid Cloud Plug-ins. 

1 . Log on to the WebSphere Cast Iron Design Console at the URL: 

http:/ /hostname/express / . The default administrator user name is admin and 
the default password is !n0rlt5@C. 

After you are logged in, you will be presented with a window as shown in 
Figure 6-3 on page 158. In the left navigation pane is the link to Manage 
Bundles. Clicking this link will start the sequence to install new bundles and 
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upgrade or remove existing bundles. The right pane lists the WebSphere 
Cast Iron server events that took place recently. 


Cast IronDesign Console 

Home Integrations 

“ : « 

Manage Bundles 

Install new bundles, and upgrade or remove existing 
bundles. 

Activity Feed 

All Activity Integration Activity 


II nteg ration " B P2 LL" updated by sea n. 
" Thursday, March 15, 2012 4:40:17 PM 


I nteg rati o n " B P2 LL" u pd ated by sea n . 
” Thursday, March 15, 2012 4:10:45 PM 


I nteg ration " B P2 LL" updated by sea n. 
” Thursday, March 15, 2012 4:02:03 PM 


£f| 1 nteg ration " B P2 LL" created by sea n. 

” Thursday, March 15, 2012 3:59:43 PM 


Integration "LDAP Group Members to Lot us Live" deleted by se 
” Thursday, March 15, 2012 3:42:18 PM 


gg Integration "LDAP Group Members to LotusLive" updated by & 
” Thursday, March 15, 2012 3:39:06 PM 


gg Integration "LDAP Group Members to LotusLive" updated by s* 
” Thursday, March 15, 2012 3:32:29 PM 


gg Integration "LDAP Group Members to LotusLive" updated by & 
" Thursday, March 15, 2012 2:49:44 PM 


1-8 of 33 Page 1| 2| 3| 4| 5 


Figure 6-3 Cast Iron Design Console 


2. To install the Service Management Extensions for Hybrid Cloud Plug-ins, 
click Manage Bundles. 

3. Browse to the folder where the installation package was downloaded, select 
the Tivoli Directory Integrator Plugin bundle, and click Upload. 

4. The License Agreement is displayed. To install the plug-in, select Accept. 
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5. At the completion of the bundle installation, you will see a list of all bundles 
that have been installed in the Cast Iron Design Console Figure 6-4). 


Cast IronDesign Console 


Home 

Integrations 







Browse... J 

Install New Bundle 



© 

Bundle Name 

Version 

Vendor 

Licence 

Install Bate 


Tivoli Directory integrator 
Plugin 

7.2. 1.0 

ibm 

S 


2012-03-09 20:30:31 

X 

Provisioning Plugin 

7.2. 1.0 

ibm 

S 


2012-03-09 20:27:03 

X 

Monitoring 

7.2. 1.0 

ibm 

S 

■ 

2012-03-09 20:23:40 

X 

1 


Figure 6-4 Tivoli Directory Integrator Plugin has been successfully installed on the Cast Iron server. 


6.2.2 Create directory entries for WebSphere Cast Iron integration 

In this section we detail the steps needed to create user entries on the Directory 
server for WebSphere Cast Iron integration. Any LDAP standard compatible 
servers, such as Tivoli Directory Server (TDS), can be used for the integration 
with WebSphere Cast Iron Directory Synchronization Plug-in. We used the Tivoli 
Directory Server for this integration scenario. 

1 . Log on to the Tivoli Directory Server Web Administration Tool at the URL: 
http:/ /<hostname>: 12100/ 1 DSWebApp/. Log in with the directory entry 
credential that has the authority to create and modify the directory entries, for 
example, cn=root as we used here, and type in the password (Figure 6-5). 



Figure 6-5 Log in to the Tivoli Directory Server Web Administration Tool 
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2. Click Users and Groups in the left navigation pane (Figure 6-6). 



Figure 6-6 Tivoli Directory Server Navigation Pane, Users and Groups 

3. Click Add user and then select the realm from the drop-down menu 
(Figure 6-7). Then click Next. 



Figure 6-7 Add user and select a Reaim 
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4. Fill in the user information for the entry you are going to create (Figure 6-8). 


Tivoli Tivoli Directory Server Web Administration Tool 



Figure 6-8 Fill in all the required information to create a new user entry in TDS 


5. After all information required as tagged with an asterisk is filled in, click 
Finish at the bottom of the page. 

6. You now have the new user entry successfully created in the LDAP directory 
server. Click Manage users in the left navigation pane to see the newly 
created user entry listed on the right-side information pane (Figure 6-9). 


Tivoli Tivoli Directory Server Web Administration Tool 



Figure 6-9 A new user entry has been successfully created and listed on TDS directory 
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7. Repeat the process to create all the user entries you need for integration with 
the WebSphere Cast Iron Directory Synchronization Plug-in. 

8. When you are finished, verify the users have been added by clicking Manage 
users again (Figure 6-10). 



Figure 6-10 All new user entries are listed and verified in TDS LDAP server 


6.2.3 Create the WebSphere Cast Iron Directory sync integration 

In this section we detail the steps needed to create the integration of WebSphere 
Cast Iron Director Synchronization with LotusLive public cloud services. The 
integration relationship needs to be set up and created first on the WebSphere 
Cast Iron Design Console, before the Directory Synchronization with LotusLive 
features can become operational. 

1 . Logon to the WebSphere Cast Iron Design Console at the URL: 

http: //hostname/express/. The default administrator user name is admin and 
the default password is !n0rlt5@C. 

2. After you are logged on, click the Integrations link at the top of the page. This 
will take you to the Cast Iron Design Console Integrations page (Figure 6-1 1 
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on page 163). The pane on the right side will display a list of existing 
integrations and their current status. 



Figure 6-11 Cast Iron Design Console Integrations pane 

3. In the left pane, under Create, click the Source drop-down menu and select 

LDAP Group Members. 

4. In the Target section, select LotusLive. 

5. After LotusLive is selected, a template for LDAP to LotusLive integration will 
be available for use. Click the Use link next to the template (Figure 6-12). 


Cast IronDesign Console 


Integrations 


Welcome backAdmii 


Create 


Fill out basic source and target information below. We will find you 
any matching templates. 


Source 

LDAP Group Members 



Templates 

LDAP to LotusLive 

Cant find what you're looking for? 


New Blank Integration 


« 

Integrations 



,, A Updated 
Name 

Updated by 

Status 

ITSO 

Tivoli 

Monito 

Server March 14, 2012 1:46:22 PM GMT 

to Off 

Premis 

Agent 

andre 

► 

Runnin 

TSAM 



IBM March 14, 2012 6:05:13 AM GMT 
Compi 

Cloud 

loic 

► 

Runnin 



Figure 6-12 The LDAP Group Members Source and LotusLive Target selected for Integration Creation 
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6. With the LDAP to LotusLive template selected for integration, the window is 
split into two halves. The left side is for the source information and the right 
side is for the target information. 

7. We work on the source information entries first: 

a. Click the blue box on the left side of the window where the number 1 is 
located. 

b. Enter the information required to connect to the enterprise LDAP server 
(Figure 6-13). 


Cast IronDesign Console 


LDAP Group Members to LotusLive 


Welcome backAdministrator^ 



Save Close 


1 


Connection Type 


LDAP Group Members 


LDAP 


▼ Details 

Name* IT| 


TDS 


LDAP name* 


TDS LDAP 


LDAP Description [j3 


Tivoli Directory Server 


LDAP URL* [j3 


ldap://1Q.7.23. 153:389 


LDAP User g] 


cn=root 


LDAP Password Cp 


LDAP Group* Cj] 


□ 


cn=IBM 1 cn=ibmpolicies l o^bm.com 


Figure 6-13 Fill int all the required information for enterprise LDAP connection 


c. Click Connect. If the input is correct you will see a message box at the top 
of the form confirming that the connect is successfully established with the 
LDAP server (Figure 6-14 on page 165). 
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Cast Iron Design Console Home integrations 

LDAP Group Members to LotusLive 


© 


CTGHC2QQ7I: Connection 
information accepted 

Operations: 

Connection Type 

None selected T 

|LDAP Group Members 


Available Objects 


1 □ t 

▼ Details 

Name* LjJ 



TDS 

1 

LDAP name* (J) 


TDS_LDAP 

J 


Figure 6-14 Connection to LDAP server has been established successfully 


d. Click Done at the bottom right corner of the window to exit from the 
Source form. 

8. Now we move to the Target side. 

a. Find the orange box at the top the right side of the window where the 
number 2 is shown, and click anywhere within the orange box. 

b. A detailed connection information form is presented. Enter the LotusLive 
account information and the network transfer connection details. 

LotusLive uses secure FTP as the network transfer protocol running on 
port 990. 

You will need your LotusLive account name and password for login, along 
with the customer ID. The LotusLive customer ID is an ID that is assigned 
to the owner of the account, and which serves as an umbrella of all the 
users within the group created under this account. It is essential that you 
enter the correct LotusLive customer ID. 
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The target information is shown in Figure 6-15. 


Cast IronDesign Console Welcome backAdmiriistrator^ 

Home Integrations 



Figure 6-15 Provide LotusLive account and connection details in the Target form 

c. Verify that all the required items are correctly entered, then click Connect. 
If everything is correct, a message will be displayed at the top of the form 
confirming the connection to LotusLive has been established (Figure 6-16 
on page 167). 
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Welcome backAdministrator 


Cast IronDesign Console 

Home Integrations 



Figure 6-16 The connection to the LotusLive is successfully created 

d. Click Done at the bottom right corner of the window to exit from the Target 
form. 

9. Now, with both Source form and the Target form of the integration completed, 
we need to save them under a single integration. Click Save at the top of the 
Cast Iron Design Console page to save the integration information. You will 
receive a confirmation box displaying the following statement: 

Integration "LDAP Group Members to LotusLive" successfully created. 
Click OK to accept. 

Click OK. 
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1 0.CIick Close to exit the integration. An overall list of all the integrations that 
have been defined on the Cast Iron server, including the new Directory 
Synchronization integration (selected in Figure 6-17), will be displayed. 


Cast IronDesign Console Welcome backAdmiciistrator^ 

Home Integrations 


» 

Integrations 


Name ^ 

Updated 

Updated by 

Status 



ITSO Tivoli Monitoring Server to Off Premise 
Agent 

March 14, 2012 1:46:22 PM GMT 

andre 

► 

Running 

11 

X 

LDAP Group Members to LotusLive 

March 25, 2012 7:30:07 AM GMT 

admin 

Stopped 

► 

X 

TSAM to IBM Compute Cloud 

March 14, 2012 6:05:13 AM GMT 

loic 

► 

Running 

11 

X 


Figure 6-17 List of currently defined integrations with status 


6.3 Running and testing the scenario 

In this section we explain the steps needed to test and run the integration 
scenario: 

1 . In the Cast Iron Design Console, go to the integrations window by clicking the 
Integrations link. A list of the current integrations defined on the server and 
their status (Figure 6-17) will be displayed. 

The integration we are going to test and run is called LDAP Group Members to 
Lotus Li ve. Notice the current status of this integration is Stopped. 

2. Activate the integration by clicking the triangle play button next to Stopped. 

3. If things are all working properly, a pop-up box displays a confirmation 
message: 

Started integration: LDAP Group Members to LotusLive”. 

Click OK to confirm. 
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4. Verify that on the Integrations window, the integration now displays a status of 
Running with the triangle play button turning green (Figure 6-18). 


Cast IronDesign Console Welcome ba ckAd mini strator^ 

Home Integrations 


» 

Integrations 


Name 

Updated 

Updated by 

Status 



ITSO Tivoli Monitoring Server to Off Premise 
Agent 

March 14, 2012 1:46:22 PM GMT 

andre 

► 

Running 

11 

X 

LDAP Group Members to LotusLive 

March 25, 2012 7:30:07 AM GMT 

admin 

► 

Running 

11 

X 

TSAM to IBM Compute Cloud 

March 14, 2012 6:05:13 AM GMT 

loiic 

► 

Running 

11 

X 


Figure 6-18 The “LDAP Group Members to LotusLive” integration status shows Running 


The integration will start to run immediately after the integration has been 
activated. It will take some time for the Cast Iron Directory Synchronization 
plug-in to scan the LDAP directory for any addition or deletion updates and 
transfer the newly created group users to the LotusLive public cloud servers. 

A LotusLive process is scheduled to run periodically to process these uploaded 
directory updates and then populate them into the related LotusLive account. 
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After the group users are successfully transferred and created within LotusLive 
account, log on to our LotusLive account for verification (Figure 6-19). 


1 My Dashboard 

Mail 

Calendar 

People - 

Apps- 

Administration - 

Sean Liu - 

Help- 

LogOut j 


- Personal 

My Account Settings 


Organization Account Settings 

Subscriptions 

Announcements 


User Accounts 

You have 17 of 25 bundled subscriptions available. 

Add User Account Resend All Expired Invitations Export User Account List 


1 -8 of 8 


Jump to page: | 


Name 


3 


Search for users 


Previous | Next 


Integrated Third-Party Apps 

Name ^ 

Role 

Status 

Subscription 

Internal Apps 

Andre Araujo 

© User 

Pending 

IBM SmartCloud Engage 

IBM SmartCloud Labs 




Advanced Trial 

Order History 

Chris Rayns 

© User 

Pending 

IBM SmartCloud Engage 

Organization Extensions 




Advanced Trial 


David Kwock 

© User 

Active 

IBM SmartCloud Engage 

System Settings 




Advanced Trial 

Security 

Jag Dhillon 

© User 

Pending 

IBM SmartCloud Engage 

Theme 




Advanced Trial 

Profile Customization 

Karen Durston 

© User 

Pending 

IBM SmartCloud Engage 

IBM SmartCloud Directory Options 




Advanced Trial 

File Download History 

Loic Marsollier 

© User 

Pending 

IBM SmartCloud Engage 
Advanced Trial 


Sean Liu 

© Administrator 

Active 

SugarCRM™ 



User 


TeamPoint™ 

ProjExec® Live - Social Project 

Management 

Salesforce.com™ 

Skype™ 

Silanis e-SignDoc™ 

Silanis e-SignRoom™ 


Figure 6-19 Users within LDAP server have been transferred and synchronized to the LotusLive account 


6.4 How the integration works 

When the synchronization integration is saved and published, a Tivoli Directory 
Integration (TDI)-specific configuration file is generated “behind the scenes” that 
represents the details of that particular integration. It contains the connection 
parameters and data flow of a user account between LDAP and LotusLive. 

After the integration process is activated and starts running, the Directory 
Synchronization plug-in will constantly check for new updates and changes by 
comparing the information it receives from LDAP server with a local database it 
maintains on the server. 
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Every 15 minutes, it will generate a set of command files that contain all the 
changes and updates it has detected and upload them to the LotusLive's server 
by FTP. On the LotusLive server, an integration service will scan its FTP 
directory every 15 minutes for new command files, and then execute the 
command files after they are found. When a command file has been processed, 
a response file is generated by LotusLive and placed in a response directory on 
the FTP server 

At the end of an integration run, the response files are collected and printed to 
the plug-in’s runtime log by the synchronization plug-in. These response files are 
also downloaded to the Cast Iron server for trace and troubleshooting purposes. 

LotusLive provides many services, including email, conferencing, and 
scheduling. The Directory Synchronization Plug-in does not provision the 
subscriptions for each individual. These have to be managed by the customer 
administrator of the LotusLive accounts after the user account have been 
created or synchronized from the LDAP server. The Directory Synchronization 
Plug-in will take care of lifetime creation and deletion of LotusLive user accounts 
based upon an LDAP group. 


6.5 Lessons learned 

In this section, we list common issues you might encounter when implementing 
the Directory Synchronization Plug-in and the solutions we discovered. 

One of the most common problems is not being able to connect to either the 
LDAP or LotusLive servers. This is usually a connection-oriented problem, which 
can be the user names and passwords, port numbers, or host IP addresses. A 
firewall sitting in between the Cast Iron server, the LDAP server, and LotusLive 
can also create network connectivity issues. If you have a connectivity problem, 
check the runtime logs. Look for error messages that show unknown host, 
connection refused or connection timed out. If you cannot resolve the host 
name of the LDAP server, try using the IP address of the LDAP server. For 
connection refused messages, make sure you use the correct port number and 
there is no firewall in between blocking your access. 

Another common problem is being unable to find the group name of an LDAP 
object. The problem can be that the fully distinguished name (DN) of the LDAP 
group object is typed incorrectly on the integration form, or the URL to access the 
object is inaccurate. Unknown LDAP object messages or not found messages 
are typically seen when an LDAP group object you try to read from does not exist 
in the LDAP directory, or you do not have access to it. You might have provided 
the wrong user name and password to access an object that is password 
protected. 
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6.6 Summary 


The Service Management Extensions for Hybrid Cloud extends the on-premises 
suite of products to provide the functionality of unifying user IDs between an 
enterprise directory and LotusLive. 

Customers who want to manage access to off-premise resources and data by 
using the same enterprise user directory maintained on premise are now able to 
accomplish and use LotusLive quickly using the same TDI user registry 
synchronization solution as before. This capability provides better security and 
control of user access by synchronizing the user directories of on-premise with 
cloud applications. The automated synchronization means users will be able to 
gain entry to the information that they have already been authorized to access 
without human intervention. 
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7 


Workload Governance and 
Management scenario 


In this chapter we discuss the Workload Governance and Management scenario 
that is supported by the IBM Service Management Extensions for Hybrid Cloud. 
First, we address the functionality of workload governance. Next, we provide the 
detailed installation and configuration information for the required components 
for the scenario. Finally, we run the scenario based on a customer use case and 
provide our results. 

In this chapter we discuss the following topics: 

► Scenario overview 

► Installation and configuration 

► Scenario walk-through 

► Lessons learned 

► Summary 


© Copyright IBM Corp. 2012. All rights reserved. 
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7.1 Scenario overview 


This chapter demonstrates the ability of a hybrid cloud to govern and manage 
workload. This is done by leveraging several IBM Hybrid Cloud components to 
create a complete solution that gives a business the ability to apply a business 
policy to a cloud service and have it enforced. The following IBM components are 
used to demonstrate this scenario 

► Tivoli Service Automation Manager (TSAM) to administer projects consisting 
of servers being monitored for performance. 

► WebSphere ILOG JRules for implementing a strategy to provision or 
decommission resources in the proper location based upon a set of business 
rules 

► IBM Tivoli Monitoring (ITM) to collect monitoring data (CPU utilization %) of 
both on-premise and cloud instances 

► Netcool/I mpact and Event Correlation Service (ECS) to analyze CPU 
utilization, detect and correct abnormal situations 
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Figure 7-1 shows a high level view of this solution. 



7.1.1 Tivoli Service Automation Manager 

The Workload Governance and Management scenario leverages Tivoli Service 
Automation Manager (TSAM) to offer a new TSAM service catalog offering called 
“Create Project with Hybrid.” This offering allows for a project that creates 
resources both with on-premise and public cloud resources based on business 
rules loaded in the ILOG Rules Execution Server. 


7.1.2 ILOG JRules Execution Server 

After TSAM creates the request, it passes the service request information to a 
Transparent Decision Service on the ILOG JRules Execution Server, which 
invokes the business rules to determine where to provision the requested 
resources. The resource location is returned to TSAM and TSAM continues to 
process the request in the cloud as indicated by the Decision Service. 
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7.1.3 Tivoli Monitoring 


After the resources are provisioned Tivoli Monitoring continues to monitor the 
resources that are part of the request project and sends data to the Netcool 
Impact (Event Correlation Service). Impact will determine if resources need to be 
moved based on business rules. 


7.1.4 Netcool Impact 

After Tivoli Monitoring Data is received about the different components of the 
hybrid service, the data is processed in Netcool Impact to determine if any 
additional resources need to be provisioned to stay within business policy. The 
Event Correlation Service in Netcool determines whether resources need to be 
allocated or deallocated. If any action is needed for a given cloud service, 
Netcool Impact puts in a service request to TSAM to perform the action. 


7.2 Installation and configuration 

In this section we explain the prerequisites, installation, and configuration of the 
workload governance and management scenario. In addition, we cover the 
environment architecture of our lab scenario. 


7.2.1 Prerequisites and installation 

Table 7-1 shows the software components that are required for the workload 
governance and management scenario. 


Table 7-1 Products needed for Workload Governance and Management scenario 


Product 

Version 

Description 

Cast Iron Operating 
System 

6.1. 0.2 

Enables companies to 
rapidly connect their hybrid 
world of public clouds, 
private clouds, and 
on-premise applications 
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Product 

Version 

Description 

Tivoli Monitoring 

6.2.2 FixPack 3 

Manages system and 
network applications, 
tracks the availability and 
performance of your 
enterprise system, and 
provides reports to track 
trends and troubleshoot 
problems 

Tivoli Netcool/I impact 

5.1 .1 FixPack 1 

Streamlines event and 
alert management, 
business service 
management, and incident 
and problem management 
processes 

Tivoli Service Automation 
Manager 

7.2.2 

Helps to automate the 
provisioning, management 
and de-provisioning of IT 
resources, hardware 
server, networks, 
operating systems, 
middleware, and 
application-level software 

WebSphere ILOG JRules 

7.1.1 

Provides functionality to 
build and deploy 
rule-based applications for 
Java, mainframe and 
service oriented 
architecture-based 
environments 


To support the solution, the following steps are assumed to have taken place: 

1 . Install and configure the Tivoli Service Automation Manager software. 

2. Deploy the IBM WebSphere Cast Iron Appliance. 

3. Install the Service management Extensions for Hybrid Cloud. 

4. Contact IBM SmartCloud Enterprise service to obtain a user account. 

5. Configure each hybrid service. 

To demonstrate this scenario an IBM x3550 and an IBM LS42 Blade, each with 
32 GB of RAM, was used. Each server had 1 TB of Disk storage to host the 


Chapter 7. Workload Governance and Management scenario 177 



















images required for this scenario. Figure 7-2 is a logical diagram of the 
configuration. 



TSAM 

Sdmtsam 

192.168.1.25 


ILOG Jrules Execution 
BurlilogOl 
192.168.1.20 


Netcool Impact 
Sysomnisles 
192.168.1.104 


WebSphere Cast Iron 
BurlcironOl 
192.168.1.29 


Public 


Tivoli Monitoring 
Sdmitm 
192.168.1.26 


Figure 7-2 Lab environment used to demonstrate Workload Governance scenario 


The remaining configuration steps discussed in this section are specific to the 
Workload Governance and Management scenario. We assume that you have 
already completed the configuration documented in Chapter 4, “Monitoring 
scenario” on page 61 and Chapter 5, “Provisioning scenario” on page 93. The 
configuration documented in this section builds on top of the work that is done in 
the Monitoring and Provisioning scenarios. 


7.2.2 TSAM additional configuration 

In this step, you will reactivate the PMRDPSIVIEW: 
1 . Stop the TSAM Server. 
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2. On the administrative system, log on as root (for UNIX) or as an 
administrative user (for Windows) and open the command window. 

3. Change directory to the Maximo home directory. 

4. Run the following script to import the PMRDPSIVIEW configuration: 
./importObject.sh 

-i nput= . . /en/rdp_pmp/V750_06 . content/RDP_pmrdpsi vi ew_chg . xml 

5. Run the following script to import the PMRDPSIVIEW object: 
structure. /importObject.sh 

-i nput= . . / en/rdp_pmp/V7 50_06 . content/NBAPITSAM_maxi ntob j ect_change . xml 

6. Run the following script to commit the changes to the database: 
./configdb.sh 

7. Restart the Tivoli Service Automation Manager server. 

7.2.3 Deploying the Event Correlation Service on the Tivoli 
Netcool/lmpact server 

In this section we explain the process used to deploy the event correlation 
service on the Tivoli Netcool/lmpact server. The Event Correlation Service is 
delivered as a single compressed file called EventCorreelationService.tar, 
which is part of the download from the IBM Service Management Library. 

1 . Log on to the Tivoli Netcool/lmpact host as the netcool user. 

2. Transfer the EventCorrelationService.tar file from the original media to the 
/tmp directory. 

3. Change to the /tmp directory. 

4. Extract the contents of the EventCorrel ationService. tar file to create an ecs 
directory that contains all the necessary files. 

5. Change to the ecs directory. 

6. Define and export the NCHOME Environment variable to specify the location of 
the Tivoli/Netcool products. The default vale for Tivoli Netcool v5.x is 
/opt/ibm/netcool. 

7. Run the installation script: ./setupEcs.sh T 

7.2.4 Editing the Event Correlation Service configuration file 

The next step is to edit the event correlation service configuration file. 

1 . Log on to the Tivoli Netcool/lmpact host as the netcool user. 
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2. Change directory to the ecs directory. 

3. Edit the ecs . properties file to replace each of the following variables with the 
correct value for your system. 


Table 7-2 Parameters to modify in ecs.properties 


Variable 

Description 

Example 

<TSAMHOST> 

The host name or IP 
Address of the Tivoli 
Service Automation 
Manager Server 

sdmsam.dlk.local 

<TSAMPORT> 

The port used for REST 
APIs by Tivoli Service 
Automation Manager 

9443 

<TSAMUSER> 

The user ID to connect to 
Tivoli Service Automation 
manager 

maxadmin 

<TASAMPWD> 

The password for the 
Tivoli Service Automation 
Manager user ID 

password 


7.2.5 Installing the WebSphere ILOG JRules Rules Execution Server 

Use the following steps to install the ILOG Rules Execution Server: 

1 . Log on to the proposed Rules Execution Server host as the user who will run 
the Rules Execution Server. 

2. Ensure that the Java Virtual machine is in your execution path. The Rules 
Execution Server requires an IBM 32-bit JVM. 

3. Download the JRules_V711_CZLX6ML.bin file from IBM Passport Advantage®. 
In our case we downloaded it to the /software directory. 

4. Change to the /software directory and start the ./J Rules_V711_CZLX6ML.bin 
file. 

5. In the installation wizard, select the appropriate language and click OK. 

6. In the Introduction window, click Next. 

7. Accept the terms of the license agreement and click Next. 

8. Select the Rules Execution Server for Java check box. Click Next. 

9. Choose the installation location. Click Next. 

10. Select the JVM to be used by the Rules Execution Server and click Next. 
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1 1 . Review the pre-installation summary and click Install. 

12. Click Done to exit the installer. 


7.2.6 Verifying the installation of the Rules Execution Server 

To validate the Rules Execution Server is installed correctly, follow these steps: 

1 . Change to the Rules Execution Server Installation directory. 

2. Start the Rules Execution Server by launching the sales console. 

3. Connect to the Rules Execution Server: 
http: / /server: 8080/res 

4. Login with the resAdmin user ID. 

7.2.7 Deploying the hybrid cloud RuleApp 

In this section we explain the deployment of the hybrid cloud ruleapp. 

1. Copy the hci Ruleapp. jar file to the /software directory. 

2. Login to the Rules Execution Server at http: //server: 8080/res with the user 
resAdmi n. 

3. In the Rules Execution Server console, click the Explorer tab. 

4. In the RuleApps View pane, click Deploy RuleApp Archive. 

5. In the Deploy RuleApp Archive window click Browse, specify the location of 
the ruleapp file, select Increment RuleApp major version, and click Deploy. 


7.2.8 Additional Tivoli Monitoring configuration 

You cannot govern and manage workloads on cloud instances that have only 
been configured for monitoring. You also cannot migrate projects to support 
workload governance after projects have been created. Currently, we are using 
cloud instances only configured for monitoring. The following steps are required 
to support the workload governance scenario: 

1 . Log on to the Linux IBM SmartCloud Enterprise instance as the default user 
idcuser. 

2. Use the sudo bash command to start a shell session as the root user. 

3. Change directory to the operating-system startup directory. 

4. Modify the /etc/ini t.d/ITMAgentsl file that was generated during the 
installation process to enable the workload governance scenario to be 
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deployed. You need to enable the root user to start the Tivoli Monitoring 
agents and change the host name reported by the cloud interface. 

The original entry is shown in Example 7-1. 

Example 7-1 ITM Agents 1 file before update 

start_all() {/bin/su - root -c 11 /opt/IBM/ITM/bin/itmcmd agent start 
lz >/dev/null 2>&1" }stop_all() {/bin/su - root -c 11 
/opt/IBM/ITM/bin/itmcmd agent stop lz >/dev/null 2>8tl" } 


The edited entry is shown in Example 7-2. 

Example 7-2 Edited ITM Agents 1 file 

start_all() { configFile=$CANDLEHOME/config/lz.ini myName="hostname 
-f" cp $configFile /tmp/lz.ini .bck cat /tmp/lz.ini .bck | sed 
l, s/ /v CTIRA_H0STNAME=.*/CTIRA_H0STNAME= l $myName7g M | sed 
l, s/^CTIRA_SYSTEM_NAME=.VCTIRA_SYSTEM_NAME= l $myName7g M > 
$configFile if [ "id -u" -eq 0 ]; then $CANDLEHOME/bin/itmcmd agent 
start lz >/var/log/i tmcmd.log 2>&1 else sudo $CANDLEHOME/bin/itmcmd 
agent start lz >/var/log/i tmcmd.log 2>&lfi }stop_all() { if [ "id 
-u" -eq 0 ] ; 

$CANDLEHOME/bin/itmcmd agent stop lz >/dev/null 2>&1 else sudo 
$CANDLEHOME/bin/itmcmd agent stop lz >/dev/null 2>&1 fi } 


7.3 Scenario walk-through 

In this scenario, a retail company has an inventory system that leverages two 
application servers. One application server runs at 80 percent CPU utilization 
and the other application server runs at 20 percent utilization. This produces a 
system that averages 50 percent CPU utilization. To handle peaks in workload, 
the company has implemented a policy that ensures that CPU utilization for the 
application servers should stay between 42 and 75 percent. This means that 
during normal workload, the two application servers are adequate because 
between the two application servers they average 50 percent CPU utilization. 

During the holiday season, though, the two application servers start running at 
100 percent CPU utilization. This would normally cause customers not to be 
serviced. However, because this retail company has implemented the policy that 
CPU utilization should stay between 42 percent and 75 percent, an additional 
server is automatically provisioned. With the addition of this third server, the CPU 
utilization drops from 100 percent CPU utilization between the two application 
servers to 67 percent CPU utilization between the three application servers. This 
allows all customers to be serviced. 
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After the holiday season, the first application server drops back down to 
80 percent CPU utilization. The second application server drops back down to 20 
percent CPU utilization. The third application server drops to 0 percent CPU 
utilization. This causes the overall CPU utilization to drop to 33, which triggers 
the automatic de-provisioning of the third application server based on the policy 
of CPU utilization should stay between 42 and 75 percent. After the third 
application server is de-provisioned, the CPU utilization drops back to 50 percent 
between the two application servers and within the policy of CPU utilization 
should be between 42 and 75 percent. 


7.3.1 Resources added to cloud project to support business policy 

In this section we demonstrate a resource being added to an application based 
on peak season load. As you will see in this scenario, the two servers that make 
up the cloud service can no longer handle the workload based on the policy that 
CPU usage must stay between 42 and 75 percent. To enforce this policy, the 
workload governance and management scenario triggers the deployment of 
additional resources (a third compute resource) to ensure the cloud service stays 
within the business policy. 

First we look at the cloud resource project resource details (Figure 7-3) in TSAM 
to see the details of the cloud resource that has been provisioned to support the 
retail application. 
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Figure 7-3 Project details 
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Then, from TSAM, we see the hybrid project has been successfully deployed 
(Figure 7-4). 
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Figure 7-4 Hybrid Cloud Project successfully deployed 


Next, we see the resources that are part of the project are being monitored 
(Figure 7-5). Initially one of the two compute resources that are part of this cloud 
service is loaded to 100 percent. The other is idle. 



Figure 7-5 CPU utilization is 100 percent on one node 
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Next we login to the event correlation service in Netcool to see the details of the 
cloud service performance (Figure 7-6). 



Figure 7-6 Event Correlation Service Console 


Chapter 7. Workload Governance and Management scenario 1 85 


In the event correlation service log (Figure 7-7) we see that the cloud service is 
only 50 percent utilized. This is true because one node is at 100 percent and the 
other is idle. 
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Figure 7-7 Event Correlation Service log 

Next we add load to the second compute resource. This simulates what would 
happen during peak retail season. As you can see in Tivoli Monitoring 
(Figure 7-8) now both nodes are at 100 percent CPU utilization. 
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Figure 7-8 CPU Utilization on second node is increased to 100 percent 
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Next we login to the Service Request Manager to see if the alert has triggered a 
service request (Figure 7-9). 


& - ' '% " lUsT i- , 

^ Administration * 


&] Assets ► 

js| Change * 

Qt Deployment * 

Jq^ Discovery * 

£* Financial * 

!% infrastructure * 

O integration + 

Inventory * 

&& Planning * 

tin Provisioning Reports t 

Petease * 

•jo. Script Maitagement ► 

** Security * 

&[ Self Servrce * 

^ Service Automation * 

: Provisioning Gonfo 

Existing Template fejg 


Enor i 

[ 

1 10 oi 


^ Service Desk *■ 

Activities and Ta- 

Service Level * 

sffl^ice Request 

Serv ice Reg ue st Manager Cata log + 

Ticket Templates 

■v System Gonfiguralton * 

Global Search 


Figure 7-9 Service Request Manager Console 


We see that a Workload Overload service request has been generated 
(Figure 7-10). 
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Figure 7-10 Workload Service Request created in Service Request System 
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Next, we look at the details of the service request and see that an automated 
Workload Overload ticket has been generated and the details of the situation are 
automatically populated (Figure 7-11). 
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Figure 7-11 Service Request details 
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We see that based on our business management policy an automatic ticket has 
been created to add another compute resource to the cloud service to enforce 
our policy (Figure 7-12). 



Figure 7-12 Service Request created for cloud resources to be allocated 

In the TSAM interface, we now see the additional resource is in the process of 
being created (Figure 7-13). 



Figure 7-13 Additional compute resource in the process of being allocated 
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Then, we see that the additional compute resource has been successfully 
allocated through the TSAM interface (Figure 7-14). 



Figure 7-14 Add New Server has been resolved 

Next, we look in the Service Request system and see that the same status that 
the additional compute resource has been successfully added (Figure 7-15). 
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Figure 7-15 Service Request shows as resolved 
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Next, we look in Tivoli Monitoring and see the third node as part of the cloud 
service and the other two compute nodes still running at 100 percent 
(Figure 7-16). 



Figure 7-16 Tivoli Monitoring Console showing all three compute resources 
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Finally we look at the project details in TSAM and see that there are three 
compute resources are part of the project (Figure 7-17). 
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Figure 7-17 TSAM project details 


7.3.2 Resources decommissioned from the cloud project to support 
business policy 

In this section we walk through the Workload Governance and Management 
scenario after peak retail season is over. We see that CPU utilization on the 
second compute resource returns to idle and the business policy of keeping CPU 
utilization between 42 and 75 percent is violated. We then demonstrate the 
process as the system enforces the policy by decommissioning the unneeded 
compute resource. 
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First we see in Tivoli Monitoring that overall utilization for the cloud service has 
dropped below 42 percent because two of the nodes are not being utilized 
(Figure 7-18). 



Figure 7-18 Tivoli Monitoring CPU utilization of the nodes that make up the cloud service 

Next, we look in the correlation service log and see that the underutilization 
scenario has been triggered (Figure 7-19). 
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Figure 7-19 Event correlation service Log 
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Next, we look at the service request to see that a service request has been 
generated for the underutilized resources (Figure 7-20). 



Figure 7-20 Going to Service Details from the Go-To Menu 

Next, we see the service request for the underused resource is resolved, and 
look at the details (Figure 7-21). 
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Figure 7-21 Underused resources service request 
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Figure 7-22 shows the Service Request ticket details. 
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Figure 7-22 Service request ticket details 
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Next we see a Service Request to the provisioning service is generated to 
de-provision the unneeded resources (Figure 7-23). 



Figure 7-23 Ticket created for provisioning service to decommission the unneeded 
resources 

The Self Service Interface in TSAM shows that the decommissioning of the 
resource is in progress (Figure 7-24). 



Figure 7-24 Resource decommissioning 
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We see that the resource has been successfully decommissioned and the 
utilization of the cloud service is back to within the CPU utilization policy 
(Figure 7-25). 
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Figure 7-25 Event Correlation Service log 

Now, the ticket in the Self Service Interface has been changed to Resol ved status 
(Figure 7-26). 



Figure 7-26 Self Service Interface shows status as resolved 
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Looking at the details of the project, we see that there are only two nodes in the 
project and that the third node has been decommissioned (Figure 7-27). 


[©] Tivoli Self Sejviee Station 

6? Do you want Fi 

refox to remember the password for "PMRDPCAUSR" on https :tfpo cl -tsam:9443? 

J 

.. Tivoli, Service 

Project: HYB 


; Kirn* 


m m 


Detail for the project and its servers 


i Project Details 
| Project Moire 



Hve 


I PrOj*Ct D*3Cri>lfcin 



ol Anxisron mfiChifi#3 

I P rojet-t Typo 



BOP 


j Start Dale 



ft' 15/11 4:53 PM 


> End Date 



Irdeliitite 


E Team Access 



IS DMTM 1 


| Total Sewr^j 



2 


I Ael b Seive n» 



£ 


Servers 

© $ **- 


Uc & 

t* & ei rt 

V 

| Select Sender Narw 



Fvtaiwgeroe ni name Bype-ivisor 

Metros (9t) CPU ^4) Disk f 

r ^. 1-10T-20-100-250 .confute- 

'■ 1 h-Y- 

■‘art vV£ 





No M o n it or 


Figure 7-27 Project Details 


198 


Hybrid Cloud Integration and Monitoring with IBM WebSphere Cast Iron 



Finally, we look at the Tivoli Monitoring portal and see that the third node is 
offline because it has been decommissioned (Figure 7-28). 



Figure 7-28 Tivoli Monitoring showing the third node is offline 


7.4 Lessons learned 

When working through the Workload Governance and Management scenario, 
we learned several lessons that make the scenario easier to implement and use. 

First, be sure to understand the network connectivity and firewall requirements 
between the enterprise and the public cloud environment. We ran into this issue 
in the lab where we had used two layers of network translation and did not 
forward all the proper ports. This caused the environment to not work until we got 
the issue resolved. 

We also found that all workload governance and management scenario projects 
must start with “HYB” in the project name. This is because the Event Correlation 
Service uses this prefix for all its actions. This was an important lesson learned 
during the usage of this scenario because for the Provisioning and Monitoring 
scenarios, this was not necessary. This became an issue when we started trying 
to build on top of the projects that we used for those scenarios, only to realize 
that the Workload Governance scenario required the HYB prefix for the other 
components of the solution to work. 
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7.5 Summary 


In this chapter we covered the ability to add resources and de-provision 
resources based on business policy. This allows a company to use both their 
on-premise resource and public cloud resources effectively to maximize their 
compute resource investment. 

In addition, we explored the ability of a hybrid cloud to enforce policy based on 
business policy. This enforcement was useful in our use case to ensure that 
customers were only paying for compute resources they were actually using, 
while handling seasonal workload without impacting the business. 
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Related publications 


The publications listed in this section are considered particularly suitable for a 
more detailed discussion of the topics covered in this book. 


IBM Redbooks 

The following IBM Redbooks publications provide additional information about 
the topic in this document. Note that some publications referenced in this list 
might be available in softcopy only. 

► Connect Cloud and On-premise Applications Using IBM WebSphere Cast 
Iron Integration, REDP-4674 

► Strategic Overview of WebSphere Appliances, REDP-4790 

► Getting Started with IBM WebSphere Cast Iron Cloud Integration, SG24-8004 
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Manager, and IBM Tivoli Netcool Configuration Manager, SG24-7893 

► IBM Tivoli Provisioning Manager V7. 1. 1: Deployment and IBM Service 
Management Integration Guide, SG24-7773 

You can search for, view, download or order these documents and other 
Redbooks, Redpapers, Web Docs, draft and additional materials, at the following 
website: 

ibm.com/redbooks 


Online resources 

These websites are also relevant as further information sources: 

► WebSphere Cast Iron Cloud Integration home page 

http : //www-01 . i bm. com/software/i ntegrati on/cast-i ron-cl oud-i ntegrati on/ 

► WebSphere Cast Iron Cloud Information Center 

http : //publ i b . boul der . i bm. com/i nfocenter/wci /v6rlm0/i ndex. jsp 
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► Service Management Extensions for Hybrid Cloud 

https : //www-304 . i bm.com/software/brandcatal og/i sml i brary/detai 1 s?cat 
al og. 1 abel =1TW10TS0D 

► Integrated Service Management Library 

https : //www-304 . i bm.com/software/brandcatal og/i sml i brary/ 

► Tivoli Service Request Manager for Service Providers 

http : //www-01 . i bm. com/software/ti vol i /products/servi ce-request-manag 
er-sp/i ndex.html 

► Tivoli Service Request Manager for Service Providers Information Center 

http: //pi c.dhe. i bm.com/i nfocenter/ti vi hel p/v34rl/i ndex. jsp?topi c=/co 
m. i bm. srm. doc_721/srm_wel come_sp.html 

► Tivoli Service Automation Manager home page 

http : //www-01 . i bm. com/software/ti vol i /products/servi ce-auto-mgr/ 

► Tivoli Service Automation Manager Information Center 

http : //publ i b. boulder. ibm.com/infocenter/tivi hel p/vlOr 1/topi c/com. ib 
m. tsam_7.2.3.doc/i c-homepage.html 

► IBM SmartCloud Cost Management (Tivoli Usage and Accounting Manager) 

http : //www-01 . i bm.com/software/tivol i /products /usage-account i ng/ 

► IBM SmartCloud Cost Management (Tivoli Usage and Accounting Manager) 
Information Center 

http : //pi c.dhe. i bm.com/i nfocenter/ti vi hel p/v3rl/topi c/com. i bm.sccm.d 
oc_2.1/wel come.htm 

► IBM SmartCloud Control Desk 

http : //www-01 . i bm. com/software/ti vol i /products/smartcl oud-control des 

k/ 

► IBM SmartCloud Control Desk Information Center 

http: //pi c.dhe. i bm.com/i nfocenter/ti vi hel p/v58rl/i ndex. jsp 

► Tivoli Application Dependency Discovery Manager 

http : //www-01 . i bm. com/software/ti vol i /products/taddm/ 

► Tivoli Application Dependency Discovery Manager Information Center 

http : //pi c.dhe. i bm.com/i nfocenter/ti vi hel p/v46rl/i ndex. jsp? topi c=%2F 
com . i bm . taddm . doc_72 1 f p3%2 Fwel come_page%2 Fwel come . h tml 

► Tivoli Provisioning Manager 

http: //www-01. i bm.com/software/tivol i /products/prov-mgr/ 
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► Tivoli Provisioning Manager Information Center 

http://pic.dhe.ibm.com/infocenter/tivihelp/v45rl/topic/coiri.ibm.tivol i 
. tpm . doc/wel come/i c- homepage . html 

► Tivoli Service Level Advisor 

http : //www-01 . i bm. com/software/ti vol i /products/servi ce-1 evel -advi sor/ 

► Tivoli Netcool Service Quality Manager 

http : //www-01 . i bm. com/software/ti vol i /products/netcool -servi ce-qual i 
ty-mgr/ 

► IBM System Director VMControl 

http : //www-03 . i bm. com/systems/software/di rector/vmcontrol /i ndex . html 

► IBM Tivoli Storage Productivity Center 

http: //www-03. i bm.com/systems/storage/software/center/ 

► IBM Tivoli Monitoring Information Center 

http://pic.dhe.ibm.eom/infocenter/tivihelp/vl5rl/topic/com.ibm.itm.d 
oc_6 . 2 . 3f p 1/wel come . htm 

► Social Business IBM SmartCloud 
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ibm.com/support 

IBM Global Services 

ibm.com/servi ces 


Related publications 203 


204 Hybrid Cloud Integration and Monitoring with IBM WebSphere Cast Iron 



Hybrid Cloud Integration and Monitoring with IBM WebSphere Cast Iron 


§p 

A 

MAW 

-O ■ =5 

0> CD 

cq 

CD CO 
</> “ 




Hybrid Cloud Integration 
and Monitoring with 
IBM WebSphere Cast Iron 


Integrate cloud 
systems with 
on-premise systems 

Use a unified 
interface for on- and 
off-premise cloud 
systems 

Allocate cloud 
resources based on 
business needs 


Cloud computing is fast emerging as a new consumption and delivery 
model for IT solutions. Two distinct cloud patterns have evolved. Private 
clouds are custom cloud applications that are on premise to companies. 
Public clouds are owned and managed by a service provider and are 
delivered on a pay-per-use basis. Although the debate between the use 
of private versus public cloud continues, the industry is moving ever 
faster toward a hybrid solution. Hybrid clouds address the integration of 
traditional IT environments with one or more clouds, private and public. 

IBM WebSphere Cast Iron along with the Tivoli Service Management 
Extensions for Hybrid Cloud supports the integration of private and 
public clouds.The Service Management Extensions for Hybrid Cloud 
supports the following scenarios: 

► Provisioning hybrid cloud resources 

► Monitoring hybrid cloud resources 

► Governing and managing workloads that use hybrid cloud 
resources 

► Provisioning users from LDAP to LotusLive 


This IBM Redbooks publication is intended for application integrators, 
integration designers, and administrators evaluating or using IBM 
WebSphere Cast Iron. In addition, executives, business leaders, and 
architects who are looking for a way to integrate cloud applications with 
their on-premise applications are shown how WebSphere Cast Iron can 
help to resolve their integration challenges. The book helps you gain an 
understanding of hybrid cloud use cases, and explains how to integrate 
cloud and on-premise applications quickly and simply. 
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